AccidentalProfessional ServicesProfessional ServicesMisdeliveryCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

The Opportunity Alliance

bd_2fd4ab2e43b4c0cc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 16, 2022

Filed

Oct 21, 2022

To disclose

5 weeks

Affected

2state residents only

Linked

3 filings

Confidence

67%

Full breach record for The Opportunity Alliance →4 incidents on file

The Opportunity Alliance experienced an inadvertent disclosure of PII for former employees via a retirement plan mailing packet. Affected data included names, addresses, SSNs, and financial info. 2 NH residents notified on Oct 14, 2022. Remediation included internal controls and staff training; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Sep 16, 2022

Discovered

Oct 21, 2022

Filed

vs. sector median

13 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_0b8aaf00899839252022-10-14 · +7dCandidate
Massachusetts State AGbd_6624f10b2cdeb80b2022-10-14 · +7dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: The Opportunity Alliance
norm: the opportunity alliance
Domain: opportunityalliance.org
Industry: Professional Servicesllm

Discovered: Sep 16, 2022
Materiality determined: —
Notification sent: Oct 14, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1566 Phishing
Regulator citations: Notified New Hampshire Attorney General

During the incident: Launched an internal investigation into the event
Promptly notified the impacted individuals
Assessed the security of its systems
Offered eighteen (18) months of complimentary credit monitoring and identity theft restoration services through CyberScout
Provided guidance on how to better protect against identity theft and fraud
Changes made: Place additional internal controls when sensitive information is handled
Provide additional training for staff involved in this event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 14 · first

Massachusetts State AGOct 14 · first

New Hampshire State AG+7d · this page

Pattern: first filing Oct 14 (ME), last Oct 21 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/opportunity-alliance-20221021.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 21, 2022
Raw hash: 31d4c1ebe3f8e6dfe6165188761d96f5c690f9d1f6001372f50b115e418c60df

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityThe Opportunity Alliance

Incidentdiscovered Sep 16, 2022

Stated responseLaunched an internal investigation into the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov