HackingTechnologyInformationStolen CredentialsTargetedLowContained

Living Proof

bd_43483f52df9b83b1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 8, 2021

Filed

Jun 14, 2021

To disclose

10 weeks

Affected

5state residents only

Linked

4 filings

Confidence

67%

Full breach record for Living Proof →

Living Proof notified New Hampshire AG of a security event detected on April 8, 2021, involving unauthorized third-party access to IT systems. No evidence of personal information access was found. 5 NH residents (employees) were notified. Response included engaging cybersecurity experts, notifying law enforcement, and offering 24 months of Experian identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 67 days

Apr 8, 2021

Discovered

Jun 14, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_357d8f3be9f0bcbd2021-06-09 · +5dVerified
Massachusetts State AGbd_c24d99f66b541ded2021-06-09 · +5dVerified
Maine State AGbd_d548a6e5673f3f8e2021-06-09 · +5dCandidate

Name: Living Proof
norm: living proof

Name: Living Proof
norm: living proof
Industry: Technologyllm

Discovered: Apr 8, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 5state-resident count only
Data types: —
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement of the incident
Initial access: valid_credentials

During the incident: Shut down the intrusion
Restore operations
Prevent further unauthorized access
Engaged a major cybersecurity firm to investigate the matter
Notified law enforcement of the incident
Provided voluntary notifications to current and former employees
Offered complimentary identity monitoring, fraud consultation and identity theft restoration services provided by Experian for a period of 24 months
Changes made: Enhanced existing security controls, such as multi-factor authentication
Strengthened network monitoring capabilities
Reviewing program to identify additional enhancements to protect the security of the network and data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJun 9 · first

Massachusetts State AGJun 9 · first

Maine State AGJun 9 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jun 9 (IN), last Jun 14 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/living-proof-20210614.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2021
Raw hash: a06d672ebfa9c7fb319f9515105c242ceac346580b950041e2848b77b02d7727

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLiving Proof

Victim entityLiving Proof

Incidentdiscovered Apr 8, 2021

Stated responseShut down the intrusion

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov