HackingFinancial ServicesFinanceVulnerability ExploitCapture Stored DataCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)BiometricMediumContained

Integrated Specialty Coverages, LLC

bd_4b0e4c711978dd1c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 18, 2025

Filed

Jul 3, 2025

To disclose

19 weeks

Affected

39state residents only

Linked

10 filings

Confidence

66%

Full breach record for Integrated Specialty Coverages, LLC →2 incidents on file

Integrated Specialty Coverages, LLC reported a security incident affecting 39 New Hampshire residents. Unauthorized access occurred between Feb 16-18, 2025, via a broker-facing web application. Data exposed included names, SSNs, driver's licenses, financial account info, basic health info, and biometric data. ISC contained the incident, notified federal law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 19 weeks / 135 days

Feb 16, 2025

Begins

Feb 18, 2025

Discovered

Jul 3, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Texas State AGbd_49ac1185c01d15de2025-07-03Verified
Massachusetts State AGbd_5751f58d2dee3b872025-07-03Verified
Washington State AGbd_0e2e91dbef33c9c92025-07-02 · +1dCandidate
Oregon State AGbd_2bc4ff9e306a1eba2025-07-02 · +1dVerified

Show 5 more filings ↓up to 15d gap

California State AGbd_2fec26ad1c0573aa2025-07-02 · +1dVerified
Montana State AGbd_cf58aa9101fb4dbb2025-07-02 · +1dVerified
Illinois State AGbd_c1dd36ffeb1033012025-07-01 · +2dVerified
Nebraska State AGbd_0b608b32a4e065c02025-06-18 · +15dVerified
Indiana State AGbd_3b911fa4f16545a42025-06-18 · +15dVerified

Name: Integrated Specialty Coverages, LLC
norm: integrated specialty coverages

Name: Integrated Specialty Coverages, LLC
norm: integrated specialty coverages
Industry: Financial Servicesllm

Discovered: Feb 18, 2025
Breach occurred: Feb 16, 2025 – Feb 18, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 18, 2025
Affected individuals: 39state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Biometric
Data elements: Date of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Federal law enforcement
Initial access: exploit_public_facing

During the incident: ISC acted immediately to contain the activity and engage external cybersecurity experts to investigate
Federal law enforcement was notified thereafter on February 23, 2025
Legal notices were issued where and as required by applicable law, beginning on June 18, 2025
Changes made: Taking steps to enhance our technical security measures
Offering credit monitoring and identity protection services to you for twelve (12) months free of charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(135 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Nebraska State AGJun 18 · first

Indiana State AGJun 18 · first

Illinois State AG+13d

Washington State AG+14d

Oregon State AG+14d

California State AG+14d

Montana State AG+14d

Texas State AG+15d

Massachusetts State AG+15d

New Hampshire State AG+15d · this page

Pattern: first filing Jun 18 (NE), last Jul 3 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/integrated-specialty-coverages-20250703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 3, 2025
Raw hash: dfe2594015f4244ef1523f2927ee3eeba6ceb73db0ead9b2be3073349e207d09

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityIntegrated Specialty Coverages, LLC

Victim entityIntegrated Specialty Coverages, LLC

Incidentdiscovered Feb 18, 2025

Stated responseISC acted immediately to contain the activity and engage external cybersecurity experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov