MalwareProfessional ServicesProfessional ServicesRansomwareStolen CredentialsData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDCredentialsHighContained

National Board for Certified Counselors, Inc.

bd_2c41a7e342598fe9 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 7, 2020

Filed

Jan 12, 2021

To disclose

18 weeks

Affected

1,743state residents only

Linked

10 filings

Confidence

65%

Full breach record for National Board for Certified Counselors, Inc. →

National Board for Certified Counselors, Inc. (NBCC) disclosed a ransomware incident where unauthorized access occurred Aug 31–Sep 7, 2020. Malware encrypted files and an actor exfiltrated PII including SSNs, DOBs, and credentials. NBCC engaged forensic investigators, notified the FBI, and offered 12 months of credit monitoring. The investigation concluded Dec 28, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 18 weeks / 127 days

Aug 31, 2020

Begins

Sep 7, 2020

Discovered

Jan 12, 2021

Filed

vs. sector median

1 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_1c897fa7e6e9d04f2021-01-12Verified
Maine State AGbd_3b308b49ee1b57412021-01-12Verified
California State AGbd_3e380c527a1439a32021-01-12Verified
Washington State AGbd_8c92c2d72fb93b572021-01-12Verified

Show 5 more filings ↓up to 11d gap

Delaware State AGbd_af7418f535af96652021-01-12Verified
Massachusetts State AGbd_f6a76ab1cbfb4dbb2021-01-12Verified
South Carolina State AGbd_ed724bb2b0de3c042021-01-13 · +1dVerified
New Hampshire State AGbd_28e4ee45da9290042021-01-21 · +9dVerified
Illinois State AGbd_e1132c683ae958112021-01-01 · +11dVerified

Name: National Board for Certified Counselors, Inc.
norm: national board for certified counselors

Name: National Board for Certified Counselors, Inc.
norm: national board for certified counselors
Industry: Professional Servicesllm

Discovered: Sep 7, 2020
Breach occurred: Aug 31, 2020 – Sep 7, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 28, 2020
Affected individuals: 1,743state-resident count only
Data types: Identity (basic)Government IDCredentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notifying regulatory authorities, as required by law
Initial access: valid_credentials

During the incident: Began working with third-party forensic investigators
Notified the Federal Bureau of Investigation
Offering twelve (12) months of complimentary access to credit monitoring and identity theft restoration services through TransUnion
Changes made: Reviewed our existing policies and procedures
Working to implement additional safeguards to further secure our information systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+11d

Maine State AG+11d

California State AG+11d

Washington State AG+11d

Delaware State AG+11d

Massachusetts State AG+11d

Montana State AG+11d · this page

South Carolina State AG+12d

New Hampshire State AG+20d

Pattern: first filing Jan 1 (IL), last Jan 21 (NH) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/nbccSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 12, 2021
Raw hash: 10090bd4721b6a8233a25afea039bd011d2e98cb581d8573687192ef79c8fdaf

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityNational Board for Certified Counselors, Inc.

Victim entityNational Board for Certified Counselors, Inc.

Incidentdiscovered Sep 7, 2020

Stated responseBegan working with third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov