Social EngineeringHealthcareProfessional ServicesHealthcarePhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedEmployee Data InvolvedGovernment IDHealth (basic)CredentialsMediumContained

Lutheran Family Services of Nebraska, Inc.

bd_47bf6e4a35b467bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 1, 2021

Filed

Jun 10, 2021

To disclose

18 weeks

Affected · nationwide

3731 in this filing

Confidence

64%

Full breach record for Lutheran Family Services of Nebraska, Inc. →

Lutheran Family Services of Nebraska, Inc. notified the NH AG of a phishing incident affecting employee email accounts. Unauthorized access occurred between Dec 2020 and Mar 2021. Data involved included SSNs, driver's licenses, health info, and credentials. 373 individuals affected total; 1 NH resident notified. No evidence of data theft found, but access confirmed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 48 days

discovery → filing · 18 weeks / 129 days

Dec 15, 2020

Begins

Feb 1, 2021

Discovered

Jun 10, 2021

Filed

vs. sector median

+6 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed373 affectedView incident

Name: McGrath North Mullin & Kratz, PC LLO
norm: mcgrath north mullin kratz pc llo

Name: Lutheran Family Services of Nebraska, Inc.
norm: lutheran family services of nebraska
Industry: HealthcarellmProfessional Servicesllm

Discovered: Feb 1, 2021
Breach occurred: Dec 15, 2020 – Mar 2, 2021
Undetected for: 48 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 3, 2021
Affected individuals: 373state + nationwide
Data types: Government IDHealth (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Took immediate action to block any unauthorized access to Employee 1’s email account
Launched an investigation into the incident
Engaged a cybersecurity firm to assist in its efforts
Took immediate action to block any unauthorized access to Employee 2’s email account
Offering you a complimentary one-year membership of Experian’s® IdentityWorks®
Changes made: Implementing additional security requirements when our employees sign into our network
Deployed additional security measures to monitor our network for any indication of a future attack
Reinforcing and providing additional mandatory phishing awareness training and simulations for our staff
Additional IT staff has been added to assist with security and training efforts across our organization
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(129 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lutheran-family-services-nebraska-20210610.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 10, 2021
Raw hash: 5089c7dd98d45f5dab182c447e3093f81f88ce421d847d4a47e7f3e7c705c0cd

Reporting entityMcGrath North Mullin & Kratz, PC LLO

Victim entityLutheran Family Services of Nebraska, Inc.

Incidentdiscovered Feb 1, 2021

Stated responseTook immediate action to block any unauthorized access to Employee 1’s email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov