HackingFinancial ServicesFinanceCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

1919 Investment Counsel, LLC

bd_0adb784852f98d6b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 21, 2020

Filed

Nov 16, 2020

To disclose

8 weeks

Affected

58state residents only

Linked

5 filings

Confidence

67%

Full breach record for 1919 Investment Counsel, LLC →

1919 Investment Counsel, LLC notified New Hampshire AG of a security incident discovered on September 21, 2020, affecting 58 NH residents. An unauthorized user gained access to systems operated by a third-party managed IT firm. No evidence of data acquisition was found, but notification was sent out of caution. Data potentially involved included names, SSNs, and bank account info. Remediation included credit monitoring and system hardening.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 56 days

Sep 21, 2020

Discovered

Nov 16, 2020

Filed

vs. sector median

on median

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_2c6df4785edb17ce2020-11-13 · +3dCandidate
Maine State AGbd_43858bbd8bd3ff8c2020-11-13 · +3dCandidate
California State AGbd_a4892bcb05cd1e5c2020-11-13 · +3dVerified
Indiana State AGbd_4822fa0902a05b222020-10-16 · +31dVerified

Name: 1919 Investment Counsel, LLC
norm: 1919 investment counsel

Name: 1919 Investment Counsel, LLC
norm: 1919 investment counsel
Industry: Financial Servicesllm

Discovered: Sep 21, 2020
Materiality determined: —
Notification sent: Oct 16, 2020
Affected individuals: 58state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General Gordon MacDonald
Initial access: valid_credentials

During the incident: Hired an outside expert forensics firm to analyze the 1919ic systems
Took steps to prevent further unauthorized access and secure 1919ic’s systems
Mailed notifications to all potentially affected individuals in your state between October 16 – November 20, 2020
Offering each potentially affected individual 24 months of 3-bureau credit monitoring
Offering a $1,000,000 insurance reimbursement policy
Offering fully managed ID theft recovery services
Offering parents of minor children who may have been impacted a 24-month subscription to Equifax’s Child Identity Monitoring program
Changes made: Doing additional monitoring of our networks
Further improving access controls
Hardening our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Indiana State AGOct 16 · first

Maine State AG+28d

California State AG+28d

New Hampshire State AG+31d · this page

Pattern: first filing Oct 16 (IN), last Nov 16 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/1919-investment-counsel-20201116.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2020
Raw hash: 3a168711bff764abdf01af4d1d828f0b13548d718660eee2de42a220a017fbde

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entity1919 Investment Counsel, LLC

Victim entity1919 Investment Counsel, LLC

Incidentdiscovered Sep 21, 2020

Stated responseHired an outside expert forensics firm to analyze the 1919ic systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov