HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Mason Tenders’ District Council Welfare Fund, Annuity Fund, and Pension Fund
bd_3855a2d323f677db · schema v1 · pii pii-v1
Full breach record for Mason Tenders’ District Council Welfare Fund, Annuity Fund, and Pension Fund →Mason Tenders' District Council Welfare Fund, Annuity Fund, and Pension Fund issued a supplemental breach notification to New Hampshire residents on July 11, 2022. The incident involved unauthorized access to directories containing participant data from December 2021 through April 2022. Approximately 12,000 individuals were affected, with data including SSNs, dates of birth, and financial account information. The Funds engaged forensic investigators and law enforcement.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_cd9d3d481fdb8195Montana State AGfiled 2022-07-07(4d gap)Verified by operator
- bd_c5f113d1b6afc03eMaine State AGfiled 2022-06-22(19d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mason-tenders-district-council-welfare-fund-annuity-fund-pension-fund-20220711.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2022
- Raw hash
- 4fc0914d371fd4a562d05ccddc14e94e47bc982a45da88465941131c1e360c01
Reporting entity
- Name
- Mason Tenders’ District Council Welfare Fund, Annuity Fund, and Pension Fundnorm: mason tenders district council welfare fund annuity fund and pension
Victim entity
- Name
- Mason Tenders’ District Council Welfare Fund, Annuity Fund, and Pension Fundnorm: mason tenders district council welfare fund annuity fund and pension
Incident
- Discovered
- Jun 14, 2022
- Materiality determined
- —
- Notification sent
- Jun 22, 2022
- Affected individuals
- 12,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.