HackingFinancial ServicesFinanceStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Elm3 Financial Group

bd_1cbb78e151c13836 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 9, 2021

Filed

Aug 13, 2021

To disclose

5 weeks

Affected

2state residents only

Linked

4 filings

Confidence

65%

Full breach record for Elm3 Financial Group →

Elm3 Financial Group, a Georgia-based wealth management and tax preparation firm, notified New Hampshire residents of a data breach. Unauthorized access occurred on June 23, 2021, when hackers guessed a vendor's password. The firm discovered the breach on July 9, 2021, shut down access, and notified the FBI. Approximately 2 NH residents were affected, with potential exposure of names, SSNs, DOBs, driver's licenses, and bank account numbers. Remediation included strengthening data storage systems with their IT provider.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 16 days

discovery → filing · 5 weeks / 35 days

Jun 23, 2021

Begins

Jul 9, 2021

Discovered

Aug 13, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemarketobd_ee15ccb3cc1cfd822021-12-07 · +116dVerified

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_d1457869378ea2642021-08-10 · +3dCandidate
Indiana State AGbd_82156a9893d6f9b62021-08-09 · +4dVerified

Name: Elm3 Financial Group
norm: elm3 financial
Domain: elm3cpatax.com

Name: Elm3 Financial Group
norm: elm3 financial
Domain: elm3cpatax.com
Industry: Financial Servicesllm

Discovered: Jul 9, 2021
Breach occurred: Jun 23, 2021
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 9, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacted relevant law enforcement agencies (FBI)
Initial access: valid_credentials

During the incident: Contacted relevant law enforcement agencies (FBI)
Ensured that outside access to our server was entirely shut down
Working with information technology service provider to strengthen data storage systems
Changes made: Working with information technology service provider to strengthen data storage systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGAug 9 · first

Massachusetts State AG+1d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/elm3-financial-group-20210811.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2021
Raw hash: 7f30ac7616dd017e10a4ff64dfd480467e5797cf27160cb6d81905df5d2f30dc

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityElm3 Financial Group

Victim entityElm3 Financial Group

Incidentdiscovered Jul 9, 2021

Stated responseContacted relevant law enforcement agencies (FBI)

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov