HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Signature Performance

bd_0a96e2de88613a0e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 18, 2024

Filed

Feb 12, 2024

To disclose

25 days

Affected

6state residents only

Linked

11 filings

Confidence

66%

Full breach record for Signature Performance →

Signature Performance, Inc. notified the NH AG of a data breach detected on Jan 18, 2024. Unauthorized access occurred Jan 17-18, 2024. ~6 NH residents affected. Data type unspecified but likely PII. Response included law enforcement notification, third-party investigation, security hardening, and credit monitoring offers.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 25 days

Jan 17, 2024

Begins

Jan 18, 2024

Discovered

Feb 12, 2024

Filed

vs. sector median

14 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedispossessorbd_d1478747c36b95f02024-02-26 · +14dVerified by operator
Leak Sitemedusabd_8ffebe88e2a8bc502024-01-24 · +19dVerified by operator

Regulatory filings (8) · sorted by filing gap

Montana State AGbd_43ac19f0de3e7ddb2024-02-12Verified by operator
Massachusetts State AGbd_4b58461a96387c192024-02-10 · +2dVerified by operator
Indiana State AGbd_84b9766c9b8ca4842024-02-09 · +3dVerified by operator
Vermont State AGbd_a3ef04fc7d3269972024-02-09 · +3dVerified by operator

Show 4 more filings ↓up to 121d gap

Maine State AGbd_c486c4540e26b49d2024-02-09 · +3dVerified by operator
HHS OCRbd_1feed69b36367c1d2024-06-10 · +119dVerified by operator
Vermont State AGbd_d1571ee5429da6cc2024-06-10 · +119dVerified by operator
Massachusetts State AGbd_9846955b811b34542024-06-12 · +121dVerified by operator

Name: Signature Performance, Inc.
norm: signature performance
Domain: signaturegenerator.com

Name: Signature Performance
norm: signature performance
Domain: signatureperformance.com
Industry: Professional Servicesllm

Discovered: Jan 18, 2024
Breach occurred: Jan 17, 2024 – Jan 18, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2024
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Notified law enforcement
Conducted a thorough investigation with the assistance of third-party specialists
Implemented an array of additional security measures
Offering complimentary access to credit monitoring and identity protection services
Changes made: Implemented an array of additional security measures to further confirm the security of our network and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGFeb 9 · first

Vermont State AGFeb 9 · first

Maine State AGFeb 9 · first

Massachusetts State AG+1d

Montana State AG+3d

New Hampshire State AG+3d · this page

HHS OCR+122d

Vermont State AG+122d

Massachusetts State AG+124d

Pattern: first filing Feb 9 (IN), last Jun 12 (MA) — a 124-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/signature-performance-20240212.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2024
Raw hash: 492a66943d0364b5c793be1d55c93a7830751c3de84625a7e0805ef9a1fc46bd

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entitySignature Performance, Inc.

Victim entitySignature Performance

Incidentdiscovered Jan 18, 2024

Stated responseNotified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov