HackingFinancial ServicesFinanceVulnerability ExploitZero-DaySupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

EFS Advisors LLC

bd_34c7a063a56e0945 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 22, 2024

Filed

May 23, 2024

To disclose

13 weeks

Affected

6state residents only

Linked

5 filings

Confidence

67%

Full breach record for EFS Advisors LLC →2 incidents on file

EFS Advisors LLC, an investment advisory firm, detected a data security incident on February 22, 2024, involving a zero-day vulnerability in software used by an external IT provider. An unauthorized third party attempted to infiltrate the network. Six New Hampshire residents were potentially affected. EFS engaged forensic investigators, secured its network, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 91 days

Feb 22, 2024

Discovered

May 23, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_31960f63d3ee1d592024-05-23Candidate
Massachusetts State AGbd_c57b78779a55a1ec2024-05-23Verified
Maine State AGbd_e97465459911133f2024-05-23Verified
Indiana State AGbd_f72c0652e062f3db2024-05-23Verified

Name: EFS Advisors LLC
norm: efs advisors

Name: EFS Advisors LLC
norm: efs advisors
Industry: Financial Servicesllm

Discovered: Feb 22, 2024
Materiality determined: —
Notification sent: May 23, 2024
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Third party: via external IT provider
Initial access: supply_chain

During the incident: Secured its network environment
Launched a thorough investigation
Engaged independent IT security and forensic investigators
Working with law enforcement
Conferring with cybersecurity experts to analyze and enhance internal security architecture
Changes made: Offered free credit monitoring and identity theft protection through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGMay 23 · first

Massachusetts State AGMay 23 · first

Maine State AGMay 23 · first

Indiana State AGMay 23 · first

New Hampshire State AGMay 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/efs-advisors-20240523.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 23, 2024
Raw hash: 8fa4e7ce5b57450ee0b70f5aca70cb5f7f056b19ab15cf45db3b45cbdd8f00fa

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEFS Advisors LLC

Victim entityEFS Advisors LLC

Incidentdiscovered Feb 22, 2024

Stated responseSecured its network environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov