DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

RETAIL CAPITAL HOLDINGS, LLC

bd_42242f20717b397c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 17, 2015

Filed

Apr 15, 2015

To disclose

29 days

Affected · nationwide

7413 in this filing

Linked

3 filings

Confidence

66%
Full breach record for RETAIL CAPITAL HOLDINGS, LLC

Retail Capital, LLC notified the NH Attorney General of an update regarding a data security incident involving a single employee's email box. On March 17, 2015, an unidentified third party gained unauthorized access to the mailbox by acquiring the manager's password. The intrusion lasted approximately 40 minutes before security was re-established. The mailbox contained personal information for 741 applicants, including names, addresses, Social Security numbers, driver's license numbers, and bank account numbers. Retail Capital offered two years of identity theft coverage and credit monitoring through ID Experts. Notices were sent to affected individuals, including 3 New Hampshire residents, on April 10, 2015.

Incident timeline

discovery → filing · 29 days

Mar 17, 2015

Begins

Mar 17, 2015

Discovered

Apr 15, 2015

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
New Hampshire State AG+14d · this page

Pattern: first filing Apr 1 (NH), last Apr 15 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.