Social EngineeringPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_BASICLowContained
McGivney, Kluger, Clark & Intoccia, P.C.
bd_0ccaf36ef44971d8 · schema v1 · pii pii-v1
Full breach record for McGivney, Kluger, Clark & Intoccia, P.C. →McGivney, Kluger, Clark & Intoccia, P.C. (MKCI) notified the NH Attorney General of a cyber incident affecting 11 NH residents. On Jan 30, 2023, employees received an email from an unidentified sender claiming to have taken MKCI data. Investigation revealed data was copied in Nov 2022. Personal information was impacted. MKCI engaged cybersecurity professionals, reported to law enforcement, and offered 12 months of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7b0d9d723a6a8a82Maine State AGfiled 2023-05-26(5d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mcgivney-kluger-clark-intoccia-20230531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 31, 2023
- Raw hash
- a83aaac05de44acf23cca4ed7230417690886417adeed7b228edc47c6db343a6
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- McGivney, Kluger, Clark & Intoccia, P.C.norm: mcgivney kluger clark intoccia
Incident
- Discovered
- Jan 30, 2023
- Materiality determined
- May 1, 2023
- Notification sent
- May 26, 2023
- Affected individuals
- 11
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to law enforcement
- Initial access
- phishing_link
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.