HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

Gibbs & Cox, Inc.

bd_398847b42389dc85 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 1, 2019

Filed

Nov 24, 2020

To disclose

14 months

Affected

3state residents only

Confidence

66%

Full breach record for Gibbs & Cox, Inc. →2 incidents on file

Gibbs & Cox, Inc. notified the New Hampshire Attorney General of a data event affecting approximately 3 NH residents. Unauthorized access occurred between March 2017 and December 2019. Data taken included names, SSNs, driver's licenses, and bank info. Discovery was October 2019; notification sent November 2020. Response included forensic investigation, law enforcement cooperation, credit monitoring, and system safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 944 days

discovery → filing · 14 months / 420 days

Mar 1, 2017

Begins

Oct 1, 2019

Discovered

Nov 24, 2020

Filed

vs. sector median

+41 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Gibbs & Cox, Inc.
norm: gibbs cox
Industry: Professional Servicesllm

Discovered: Oct 1, 2019
Breach occurred: Mar 1, 2017 – Dec 31, 2019
Undetected for: 944 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 16, 2020
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified other government regulators
Initial access: valid_credentials

During the incident: Launched an investigation in cooperation with federal law enforcement
Assistance of third-party computer forensic specialists
Working with specialists to conduct a comprehensive review of the information taken by the unknown actor
Implemented additional industry-leading safeguards to protect the security of information in its systems
Notified other government regulators
Providing written notice to those individuals who may be affected by this incident
Offer of complimentary access to 24 months of credit monitoring and identity restoration services through TransUnion
Changes made: Implemented additional industry-leading safeguards to protect the security of information in its systems
Reviewed our existing policies and procedures and implemented additional safeguards to further secure the information in our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(420 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gibbs-cox-20201124.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2020
Raw hash: 00fb8d61be2eb78a26baef6364ef182c290064a0c8f2e7cf7a2d8e25ef69247f

Reporting entityMullen Coughlin LLC

Victim entityGibbs & Cox, Inc.

Incidentdiscovered Oct 1, 2019

Stated responseLaunched an investigation in cooperation with federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov