Social EngineeringProfessional ServicesProfessional ServicesPhishingBECTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancialMediumResolved

LAZ Karp Associates, LLC

bd_2edae37bec95d72c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 17, 2016

Filed

Mar 17, 2016

To disclose

29 days

Affected

53state residents only

Linked

3 filings

Confidence

66%

Full breach record for LAZ Karp Associates, LLC →

LAZ Karp Associates, LLC notified the NH AG of a Business Email Compromise incident on Feb 17, 2016. An employee sent W-2s (SSN, address, compensation) to an impersonator. 53 NH residents affected. Notices mailed March 9, 2016, offering 24 months identity protection. Internal investigation and law enforcement notification occurred.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Feb 17, 2016

Begins

Feb 17, 2016

Discovered

Mar 17, 2016

Filed

vs. sector median

15 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_9f7295cdbf0a3ad72016-03-21 · +4dCandidate
Massachusetts State AGbd_1fdd87c7f9cf3c362016-03-22 · +5dVerified

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: LAZ Karp Associates, LLC
norm: laz karp associates
Industry: Professional Servicesllm

Discovered: Feb 17, 2016
Breach occurred: Feb 17, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 9, 2016
Affected individuals: 53state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
Initial access: phishing_link

During the incident: Undertaking an internal investigation of the matter
Reported the matter to law enforcement
Offering 24 months of complimentary identity protection and repair services, including three-bureau credit monitoring
Changes made: Reviewing its internal policies and data-management protocols
Implementing enhanced security measures to help prevent this type of incident from recurring in the future
Working to raise employee awareness on how to properly handle requests for sensitive information and how to recognize a potential “phishing scheme.”
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGMar 17 · first · this page

California State AG+4d

Massachusetts State AG+5d

Pattern: first filing Mar 17 (NH), last Mar 22 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/laz-karp-associates-20160317.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2016
Raw hash: 5dd60b5236eb73ef7d5f6883da678ff030748ce010cf1dc58ab8250f672997b0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNorton Rose Fulbright US LLP

Victim entityLAZ Karp Associates, LLC

Incidentdiscovered Feb 17, 2016

Stated responseUndertaking an internal investigation of the matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov