HackingVulnerability ExploitCapture Stored DataData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
Pear Tree Advisors, Inc
bd_3c94b5526a69175f · schema v1 · pii pii-v1
Full breach record for Pear Tree Advisors, Inc →Pear Tree Advisors, Inc. reported a data security incident involving its third-party vendor, Integrated Systems Corporation (ISCorp). Unauthorized individuals exploited a vulnerability in MOVEit file transfer software on May 31, 2023, accessing shareholder data queued for transfer. The incident affected 100 New Hampshire residents. PTA engaged forensic investigators and IT providers, and offered credit monitoring services to affected shareholders.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2355ed4a6f65a21cMontana State AGfiled 2023-07-07(3d gap)Candidate
- bd_367e14f9a58bed93California State AGfiled 2023-07-07(3d gap)Verified
- bd_b166807b6cfdfe13Maine State AGfiled 2023-07-07(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pear-tree-advisors-20230710.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2023
- Raw hash
- f8a7ca8121c2d4544d3d3e9d9000d5c69524f71f5ebb600119ebcfb6c85f05bd
Reporting entity
- Name
- Pear Tree Advisors, Incnorm: pear tree advisors
Victim entity
- Name
- Pear Tree Advisors, Incnorm: pear tree advisors
Incident
- Discovered
- Jun 5, 2023
- Materiality determined
- Jun 14, 2023
- Notification sent
- Jul 7, 2023
- Affected individuals
- 100
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of Justice Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.