HackingOtherStolen CredentialsTargetedIdentity (basic)Government IDHealth (basic)MediumContained

International Mission Board

bd_2e8a0c7eb3e6b2df · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2018

Filed

Jul 6, 2018

To disclose

12 weeks

Affected

44state residents only

Linked

7 filings

Confidence

67%

Full breach record for International Mission Board →

International Mission Board notified NH AG of a data breach discovered April 11, 2018. An unknown actor accessed applicant data including SSNs, DOBs, and limited health info. 44 NH residents affected. Notices mailed July 6, 2018. IMB engaged forensic experts, secured network, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 86 days

Apr 11, 2018

Discovered

Jul 6, 2018

Filed

vs. sector median

+4 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_1e1369f1c0be557a2018-07-06Verified
Massachusetts State AGbd_6a19fcd136c9f5c22018-07-06Verified
Oregon State AGbd_a4f2be36b26874c22018-07-06Verified
Washington State AGbd_deb2f2346ecff13a2018-07-06Verified

Show 2 more filings ↓up to 10d gap

Montana State AGbd_9d32b8f4df8a3ccf2018-07-05 · +1dCandidate
South Carolina State AGbd_4301755604d700af2018-07-16 · +10dVerified

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org
Industry: Otherllm

Discovered: Apr 11, 2018
Materiality determined: —
Notification sent: Jul 6, 2018
Affected individuals: 44state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Coordinating with a law enforcement investigation
Initial access: valid_credentials

During the incident: Terminated the unauthorized access
Implemented measures to secure its network
Launched a thorough investigation with the help of leading independent data forensics experts
Coordinating with a law enforcement investigation
Provided potentially impacted individuals with identity theft restoration and credit monitoring services for 12 months at no cost to the individual, through ID Experts
Provided notice to the credit reporting agencies
Changes made: Implementing new security technologies around IMB's most sensitive systems and data
Improving its ability to detect and respond to external attacks to its data network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGJul 5 · first

California State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

Washington State AG+1d

New Hampshire State AG+1d · this page

South Carolina State AG+11d

Pattern: first filing Jul 5 (MT), last Jul 16 (SC) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/international-mission-20180706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2018
Raw hash: d052eb5f4f4f4ea7fac5f9a555ed4aa6810265a7835ca11c5df01f26e31d29b7

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityInternational Mission Board

Victim entityInternational Mission Board

Incidentdiscovered Apr 11, 2018

Stated responseTerminated the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov