HackingFinancial ServicesFinanceCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHighContained

Red Boat Advisor Resources

bd_1b63cbeb90faded8 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 1, 2012

Filed

Aug 20, 2012

To disclose

20 weeks

Affected

4,657

Linked

2 filings

Confidence

65%

Full breach record for Red Boat Advisor Resources →

Lincoln Financial Securities Corporation (LFS) notified New Hampshire regulators of unauthorized access to a virtual server used by Red Boat Advisor Resources between January and April 2012. The server contained images of customer documents including SSNs and financial data. Approximately 4,657 customers were potentially affected. Forensic review found no evidence of actual data acquisition or misuse. LFS replaced the server, engaged forensic investigators, and is offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 91 days

discovery → filing · 20 weeks / 141 days

Jan 1, 2012

Begins

Apr 1, 2012

Discovered

Aug 20, 2012

Filed

vs. sector median

+12 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_0089f2c6c86322062012-08-21 · +1dVerified

Name: Lincoln Financial Securities Corporation
norm: lincoln financial securities

Name: Red Boat Advisor Resources
norm: red boat advisor resources
Industry: Financial Servicesllm

Discovered: Apr 1, 2012
Breach occurred: Jan 1, 2012 – Apr 1, 2012
Undetected for: 91 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 22, 2012
Affected individuals: 4,657state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Initial access: exploit_public_facing

During the incident: Ensured that the virtual server was replaced and any vulnerabilities were remediated in the new server brought online
Immediately retained the services of an independent forensic investigator to review and determine what had occurred
Preparing to provide notification to individuals
Offering free credit report monitoring to the individuals
Changes made: Providing free credit monitoring for a 12-month period through Kroll Advisory Solutions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(141 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 20 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/red-boat-advisor-20120820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2012
Raw hash: 51ece6b6fdf6340867741f4b01bd3959d8667986977239e06c391902a66b61ab

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLincoln Financial Securities Corporation

Victim entityRed Boat Advisor Resources

Incidentdiscovered Apr 1, 2012

Stated responseEnsured that the virtual server was replaced and any vulnerabilities were remediated in the new server brought online

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov