Social EngineeringPhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
National Advisors Holdings, Inc.
bd_2aff28697cf02eb2 · schema v1 · pii pii-v1
Full breach record for National Advisors Holdings, Inc. →National Advisors Holdings, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a data security incident discovered on April 17, 2023. Unauthorized access to four employee email accounts occurred via phishing, exposing client PII including SSNs. The initial notification on Feb 2, 2024, was supplemented on Aug 12, 2024, to notify 17 additional NH residents due to a vendor mailing error. Total affected NH residents: 101. Credit monitoring and fraud assistance were offered.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8bb50356ed20fe23Maine State AGfiled 2024-08-13(1d gap)Candidate
- bd_e7d178d353d24dfdVermont State AGfiled 2024-08-14(2d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-advisors-holdings-20240812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 12, 2024
- Raw hash
- 6b356aedcbffbe848fdb199d1540d9a0e3a1e4fc3632773b46378e66716834ea
Reporting entity
- Name
- National Advisors Holdings, Inc.norm: national advisors
Victim entity
- Name
- National Advisors Holdings, Inc.norm: national advisors
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- —
- Notification sent
- Feb 2, 2024
- Affected individuals
- 101
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 months(483 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.