HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Key Financial Services

bd_4850d536a0e5448f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 21, 2021

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Key Financial Services →

Key Financial, Inc. notified the NH Attorney General of unauthorized access to an employee's email account on April 2, 2021. The investigation could not determine if emails were viewed, but a review identified two New Hampshire residents whose names and financial account information were in the impacted data. Notifications were sent on September 22, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 2, 2021

Begins

Sep 21, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_4b8d42df1cea71652021-09-22 · +1dVerified
Maine State AGbd_5aae735d69c8389b2021-09-22 · +1dCandidate
Massachusetts State AGbd_9bc53dffd104785e2021-09-22 · +1dVerified

Name: Key Financial Services
norm: key financial
Domain: keyfinancial.com

Name: Key Financial Services
norm: key financial
Domain: keyfinancial.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Apr 2, 2021
Materiality determined: —
Notification sent: Sep 22, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took steps to secure the email accounts
Launched an investigation
Engaged a cybersecurity firm to assist in a full forensic analysis of the incident
Reviewed the emails and attachments in the accounts to identify potentially affected individuals
Notifying two New Hampshire residents via U.S. mail
Providing a telephone number for potentially affected individuals to call with any questions
Changes made: Taking steps to enhance their existing security protocols
Re-educating staff awareness on these types of incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGSep 21 · first · this page

Indiana State AG+1d

Maine State AG+1d

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/key-financial-20210922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 21, 2021
Raw hash: fedcc5a5ea61e264770ee65278ee8712772c4d52c34cb7d6c9add624f66960dd

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityKey Financial Services

Victim entityKey Financial Services

IncidentUnauthorized Access

Stated responseTook steps to secure the email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov