Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

EASTER SEALS NEW HAMPSHIRE, INC.

bd_11d14eb0ee22c32b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 3, 2014

Filed

Nov 12, 2014

To disclose

9 days

Affected

7state residents only

Confidence

66%

Full breach record for EASTER SEALS NEW HAMPSHIRE, INC. →

Easter Seals New Hampshire, Inc. notified the NH Attorney General of a phishing scam affecting 7 employees. Attackers obtained usernames/passwords via emails on Nov 1-2, 2014. Unauthorized changes to direct deposit routing were made but caught by internal controls before funds moved. IT blocked emails, reset passwords, and disabled app access. Employees received notice and 1-year LifeLock coverage.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 9 days

Nov 1, 2014

Begins

Nov 3, 2014

Discovered

Nov 12, 2014

Filed

vs. sector median

17 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident

Name: EASTER SEALS NEW HAMPSHIRE, INC.
norm: easter seals new hampshire
Domain: eastersealsnh.org

Name: EASTER SEALS NEW HAMPSHIRE, INC.
norm: easter seals new hampshire
Domain: eastersealsnh.org
Industry: Professional Servicesllm

Discovered: Nov 3, 2014
Breach occurred: Nov 1, 2014 – Nov 2, 2014
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 12, 2014
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: Notified NH Attorney General Joseph Foster pursuant to N.H. Rev. Stat. § 359-C:20
Initial access: phishing_link

During the incident: Immediately blocked emails from the suspect email address
Sent notification to all email users to disregard the suspect email
Instructed users to reset their passwords
Disabled web access to the affected software application
Contacted counsel Sheehan Phinney Bass and Green, PA
Performed a password reset of all permissions with respect to the impacted applications
Restricted display and functionality within the impacted application
Conducted subsequent reviews to ensure that the restrictions function properly
Plans to report this incident to the Internet Crime Complaint Center
Changes made: Developing a training program specifically designed to assist staff in identifying phishing emails
Reviewing best practices for maintaining passwords
Offering to pay for identity protection services from LifeLock for a period of one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 days(9 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/easter-seals-20141112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2014
Raw hash: 59f20eeb16603fc91842539bc688469090381567d8e5adae64264ad3d96f6d38

Reporting entityEASTER SEALS NEW HAMPSHIRE, INC.

Victim entityEASTER SEALS NEW HAMPSHIRE, INC.

Incidentdiscovered Nov 3, 2014

Stated responseImmediately blocked emails from the suspect email address

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov