HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

G2 Insurance Services

bd_3586460322e75932 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 4, 2021

Filed

May 17, 2021

To disclose

15 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for G2 Insurance Services →

G2 Insurance Services notified the New Hampshire Attorney General of a cybersecurity incident discovered on February 4, 2021, where an unauthorized user accessed systems containing names, dates of birth, and driver's license numbers. One NH resident was affected. G2 engaged forensic investigators, offered 12 months of identity monitoring via Kroll, and mailed notifications on May 7, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 102 days

Feb 4, 2021

Discovered

May 17, 2021

Filed

vs. sector median

+6 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_78477ca6b529aed22021-05-10 · +7dVerified
California State AGbd_d96498807efbaeb42021-07-23 · +67dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: G2 Insurance Services
norm: g2 insurance
Domain: g2insuranceservices.com
Industry: Financial Servicesllm

Discovered: Feb 4, 2021
Materiality determined: —
Notification sent: May 7, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Engaged a professional cybersecurity forensics team to investigate the incident
Offering complimentary credit monitoring to the affected individuals
Changes made: Reviewing and upgrading its capabilities to stay on the leading edge of available protection
Added additional layers of cybersecurity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMay 10 · first

New Hampshire State AG+7d · this page

California State AG+74d

Pattern: first filing May 10 (MA), last Jul 23 (CA) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/g2-insurance-services-20210517.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 17, 2021
Raw hash: 36e284ad5e278654a547179a2b16b691aba5cf1b53e4ea65750d30d531a87e04

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityG2 Insurance Services

Incidentdiscovered Feb 4, 2021

Stated responseEngaged a professional cybersecurity forensics team to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov