HackingIdentity (basic)Financial accountLowActive

Austin Rare Coins, Inc.

bd_397e8d175c09a125 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 1, 2012

Filed

Jul 20, 2012

To disclose

11 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Austin Rare Coins, Inc. →

Austin Rare Coins, Inc. notified the NH Attorney General of a security breach in March 2012 where unauthorized access to secured data systems resulted in the potential compromise of customer name, credit card, phone, and address data. At least 1 NH resident was affected. The company provided one year of identity protection services and cooperated with law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 61 days

discovery → filing · 11 weeks / 80 days

Mar 1, 2012

Begins

May 1, 2012

Discovered

Jul 20, 2012

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Austin Rare Coins, Inc.
norm: austin rare coins

Name: Austin Rare Coins, Inc.
norm: austin rare coins

Discovered: May 1, 2012
Breach occurred: Mar 1, 2012
Undetected for: 61 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified NH Department of Justice
Initial access: valid_credentials

During the incident: Provided notice to all affected customers
Made affected customers aware of steps to minimize or prevent misuse
Arranged to provide one year of access to CSID, a leading provider of identity protection and fraud detection services, to customers whose credit card information has been compromised
Working closely with appropriate law enforcement agencies
Continues to actively assist with law enforcement investigations
Investigating the matter internally
Cooperating with law enforcement agencies
Working with information technology staff and third party security consultants to prevent any future unauthorized access
Changes made: Working with information technology staff and third party security consultants to prevent any future unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/austin-rare-coins-20120720.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 20, 2012
Raw hash: 731d273cd049438c8051022ef41c06b6d1ac4b59aae0ba30bc70dca8cc3eea78

Reporting entityAustin Rare Coins, Inc.

Victim entityAustin Rare Coins, Inc.

Incidentdiscovered May 1, 2012

Stated responseProvided notice to all affected customers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov