HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Central Illinois Carpenters Retirement Savings Fund

bd_2695ab7fb65d7eb5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 27, 2020

Filed

Jan 11, 2021

To disclose

11 weeks

Affected

1state residents only

Linked

7 filings

Confidence

66%

Full breach record for Central Illinois Carpenters Retirement Savings Fund →2 incidents on file

Central Illinois Carpenters Retirement Savings Fund notified the NH AG of a data event affecting 1 NH resident. Unauthorized access occurred Oct 26, 2020, via compromised user credentials. Exfiltrated data included names, addresses, and SSNs. The Fund engaged forensic specialists, notified individuals on Dec 28, 2020, and provided 1 year of credit monitoring via Experian. Investigation was ongoing at time of filing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 11 weeks / 76 days

Oct 26, 2020

Begins

Oct 27, 2020

Discovered

Jan 11, 2021

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Illinois State AGbd_48891c806d61a6122021-01-01 · +10dVerified
Illinois State AGbd_7116a081d4d4a6512021-01-01 · +10dVerified
Montana State AGbd_2b674ea538cc2d4a2020-12-28 · +14dCandidate
Maine State AGbd_8bcbcb8c05790b9f2020-12-28 · +14dVerified

Show 2 more filings ↓up to 14d gap

Indiana State AGbd_b76a01bc51fcd7392020-12-28 · +14dVerified
Massachusetts State AGbd_b9be15bbe80bc3012020-12-28 · +14dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Central Illinois Carpenters Retirement Savings Fund
norm: central illinois carpenters retirement savings
Industry: Financial Servicesllm

Discovered: Oct 27, 2020
Breach occurred: Oct 26, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 28, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reporting this incident to other appropriate state regulatorsThe Fund has notified the Illinois Attorney General's Office about this event
Initial access: valid_credentials

During the incident: Worked with third party forensic specialists
Moved quickly to investigate and respond to the incident
Assess the security of The Fund's systems
Notify potentially affected individuals
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for one (1) year, through Experian's IdentityWorks
Changes made: Implemented additional security enhancements to better protect against similar incidents in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Montana State AGDec 28 · first

Maine State AGDec 28 · first

Indiana State AGDec 28 · first

Massachusetts State AGDec 28 · first

Illinois State AG+4d

New Hampshire State AG+14d · this page

Pattern: first filing Dec 28 (MT), last Jan 11 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/central-illinois-carpenters-retirement-20210111.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 11, 2021
Raw hash: 8504195900dedee41b3027bd825c265daea64fb40cd5482bc9cfd5956a331e19

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityCentral Illinois Carpenters Retirement Savings Fund

Incidentdiscovered Oct 27, 2020

Stated responseWorked with third party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov