HackingOtherStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Financial accountLowContained

Honor Flight New England

bd_3605d12e3329478c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 4, 2017

Filed

Jan 24, 2017

To disclose

20 days

Affected

242state residents only

Linked

2 filings

Confidence

66%

Full breach record for Honor Flight New England →

Honor Flight New England notified the NH Attorney General of a server breach affecting 242 NH residents. Unauthorized access occurred between Nov 2016 and Jan 2017, exposing names, addresses, and bank account/routing numbers. The server was taken offline and the breach resolved. Affected individuals were notified on Jan 24, 2017.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 50 days

discovery → filing · 20 days

Nov 15, 2016

Begins

Jan 4, 2017

Discovered

Jan 24, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8907c55cd6e8125e2017-01-24Verified

Name: Honor Flight New England
norm: honor flight new england

Name: Honor Flight New England
norm: honor flight new england
Industry: Otherllm

Discovered: Jan 4, 2017
Breach occurred: Nov 15, 2016 – Jan 4, 2017
Undetected for: 50 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 24, 2017
Affected individuals: 242state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the Attorney General’s Office

During the incident: Server was taken out-of-service
Breach resolved
Provided written notification to affected individuals
Provided a telephone number for potentially affected individuals to call
Continues to work with information technology security experts
Changes made: Implement measures to further strengthen the security of its system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJan 24 · first

New Hampshire State AGJan 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/honor-flight20170124.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 24, 2017
Raw hash: a10fe404495ac847410be77acdbeb8868dc0d397d85c7c8ea0f5156ac3404001

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHonor Flight New England

Victim entityHonor Flight New England

Incidentdiscovered Jan 4, 2017

Stated responseServer was taken out-of-service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov