HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountCriticalContained

Lincoln Financial Securities Corporation

bd_37fffdf30029c40b · schema v1 · pii pii-v1

Severity

Critical

Discovered

Aug 17, 2009

Filed

Jan 4, 2010

To disclose

20 weeks

Affected · nationwide

1,200,00018,900 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Lincoln Financial Securities Corporation →5 incidents on file

Lincoln Financial Securities Corporation (LFS) and Lincoln Financial Advisors Corporation (LFA) notified the NH AG of a vulnerability in a portfolio information system caused by shared usernames and passwords. Discovered Aug 17, 2009, after FINRA received credentials. No evidence of actual misuse found, but ~1.2M individuals (18,900 NH residents) notified. Data included names, SSNs, account numbers. Remediation included discontinuing shared creds and offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 140 days

Aug 17, 2009

Discovered

Jan 4, 2010

Filed

vs. sector median

+12 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8fe72448a67b891a2010-01-05 · +1dVerified

Name: Edwards Angell Palmer & Dodge
norm: edwards angell palmer dodge

Name: Lincoln Financial Securities Corporation
norm: lincoln financial securities
Industry: Financial Servicesllm

Discovered: Aug 17, 2009
Materiality determined: —
Notification sent: Jan 6, 2010
Affected individuals: 1,200,000state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Regulator citations: Notified FINRA of the vulnerabilityFiled notification with New Hampshire Attorney General's Office
Initial access: valid_credentials

During the incident: Engaged Kroll Ontrack, Inc. to conduct a forensic investigation
Engaged Edwards Angell Palmer & Dodge LLP as outside counsel
Discontinued all shared usernames and passwords
Heightened enforcement of existing LNC policy that prohibits shared usernames and passwords
Conducting a comprehensive review of client information systems for similar vulnerabilities
Changes made: Implemented continuous credit monitoring through Kroll
Provided identity theft restoration services through Kroll
Offered free access to credit reports to affected individuals
Strengthening computer security policies and procedures across all information technology platforms
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJan 4 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lincoln-financial-20100104.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 4, 2010
Raw hash: 8deff29bd049606b56ed4101ab3f09a52b22bef506ed1cad781041fe8d998539

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEdwards Angell Palmer & Dodge

Victim entityLincoln Financial Securities Corporation

Incidentdiscovered Aug 17, 2009

Stated responseEngaged Kroll Ontrack, Inc. to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov