HackingOtherCustomer Data InvolvedPIIIdentity (basic)LowContained

Star Island Management Company

bd_2a1e57b75c2529eb · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 30, 2023

Filed

Sep 20, 2023

To disclose

12 weeks

Affected

12state residents only

Linked

4 filings

Confidence

67%

Full breach record for Star Island Management Company →2 incidents on file

Star Island Management Company notified the NH AG of a June 30, 2023 network security incident where an unauthorized third party accessed the network. 12 NH residents were notified on Aug 21, 2023. PII was potentially exposed. The company engaged forensic investigators, secured the network, reported to law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 82 days

Jun 30, 2023

Discovered

Sep 20, 2023

Filed

vs. sector median

+5 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_af2ae22e2e602d682023-09-25 · +5dVerified
Maine State AGbd_e7807220af534e032023-09-13 · +7dCandidate
Indiana State AGbd_78dc8cf66e2ced932023-08-21 · +30dVerified

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: Star Island Management Company
norm: star island management
Domain: starisland.org
Industry: Otherllm

Discovered: Jun 30, 2023
Materiality determined: —
Notification sent: Aug 21, 2023
Affected individuals: 12state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Shut off all access to the network
Engaged a specialized third-party forensic incident response firm
Reported this matter to law enforcement
Reviewed and altered its policies and procedures relating to the security of its systems and servers
Offered free credit monitoring and identity theft protection through Cyberscout
Changes made: Secured its network and the data that we maintain
Reviewed and altered its policies and procedures relating to the security of its systems and servers and applicant information processing
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(82 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 21 · first

Maine State AG+23d

New Hampshire State AG+30d · this page

Massachusetts State AG+35d

Pattern: first filing Aug 21 (IN), last Sep 25 (MA) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/star-island-management-company-20230920.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 20, 2023
Raw hash: 245091fe43503acbbc7d421ab61226f5e67eb7839d57adb8792f62b3824fdae5

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityStar Island Management Company

Incidentdiscovered Jun 30, 2023

Stated responseShut off all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov