Social EngineeringRetail & ConsumerRetailPhishingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumContained

The J.N. Phillips Company, Inc.

bd_083507a2a2eb98ac · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 7, 2017

Filed

Mar 17, 2017

To disclose

10 days

Affected

24state residents only

Confidence

66%

Full breach record for The J.N. Phillips Company, Inc. →

The J.N. Phillips Company, Inc. reported a phishing incident to the New Hampshire Attorney General on March 17, 2017. An unauthorized actor impersonated management via email on February 16, 2017, tricking an employee into disclosing personal information of 24 New Hampshire residents. Data included names, addresses, SSNs, and W-2 details. The company provided 24 months of credit monitoring and notified affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 19 days

discovery → filing · 10 days

Feb 16, 2017

Begins

Mar 7, 2017

Discovered

Mar 17, 2017

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed24 affectedView incident

Name: The J.N. Phillips Company, Inc.
norm: the jn phillips

Name: The J.N. Phillips Company, Inc.
norm: the jn phillips
Industry: Retail & Consumerllm

Discovered: Mar 7, 2017
Breach occurred: Feb 16, 2017
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 20, 2017
Affected individuals: 24state-resident count only
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reporting of Security Incident Pursuant to N.H. Rev. Stat. § 359-C:20
Initial access: phishing_link

During the incident: Providing notice to all affected individuals, including both current and former employees
Providing twenty-four (24) months of identity repair and restoration and credit monitoring services through AllClear ID at no cost
Continuing to assess its procedures and employee training and awareness programs
Changes made: Continuing to assess its procedures and employee training and awareness programs to ensure that personal information is protected
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jn-phillips-20170317.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2017
Raw hash: 81780abc7b68d8ed79b897486bd45adac308375ce3088ac9ce528bbc86c4e9f6

Reporting entityThe J.N. Phillips Company, Inc.

Victim entityThe J.N. Phillips Company, Inc.

Incidentdiscovered Mar 7, 2017

Stated responseProviding notice to all affected individuals, including both current and former employees

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov