HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

RSC Insurance Brokerage, Inc.

bd_36c011b9f0cd7027 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 12, 2020

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for RSC Insurance Brokerage, Inc. →5 incidents on file

RSC Insurance Brokerage, Inc. experienced unauthorized access to an employee's email account on May 6, 2020. The attacker used the account to send phishing emails. Investigation determined that personal information, including names and driver's license numbers, of one New Hampshire resident may have been accessed. RSC reset credentials, engaged a cybersecurity firm, and notified the affected individual and the NH Attorney General. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

May 6, 2020

Begins

Oct 12, 2020

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_41ac518a883e5e112020-10-09 · +3dVerified

Name: RSC Insurance Brokerage, Inc.
norm: rsc insurance brokerage

Name: RSC Insurance Brokerage, Inc.
norm: rsc insurance brokerage
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 6, 2020
Materiality determined: —
Notification sent: Oct 9, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email CollectionT1566 Phishing
Threat actor: External
Regulator citations: Notified the Attorney General of New Hampshire
Initial access: valid_credentials

During the incident: Reset the password to the employee's email account
Launched an investigation, with the assistance of a cyber security firm
Conducted a comprehensive review of the emails and attachments in the employee's email account
Mailed a notification letter via United States Postal Service First-Class mail to one resident
Offering the New Hampshire resident a complimentary one-year membership in credit monitoring and identity theft protection services from Kroll
Changes made: Reevaluating its existing security protocols
Reinforcing education with its employees on how to identify and avoid phishing emails
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 9 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rsc-insurance-brokerage-20201012.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 12, 2020
Raw hash: 6123b9fccfbb2346c9b571aed56e0f98a4af60298be943cf4baae9ccef8b6c78

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRSC Insurance Brokerage, Inc.

Victim entityRSC Insurance Brokerage, Inc.

IncidentUnauthorized Access

Stated responseReset the password to the employee's email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov