Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Akwa Vista LLC

bd_4c916013a4be885d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 10, 2019

Filed

Feb 6, 2019

To disclose

27 days

Affected

65state residents only

Linked

2 filings

Confidence

66%

Full breach record for Akwa Vista LLC →

Akwa Vista LLC notified the NH AG of a phishing incident where an employee's email was accessed between May 11 and Aug 31, 2018. Discovered Jan 10, 2019. 65 NH residents notified on Feb 6, 2019. Data included names, SSNs, driver's licenses, passports, and financial account info. Response included forensic investigation, law enforcement contact, and 1-year Experian credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 244 days

discovery → filing · 27 days

May 11, 2018

Begins

Jan 10, 2019

Discovered

Feb 6, 2019

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_4e7b598e089651d82019-02-06Verified

Name: Akwa Vista LLC
norm: akwa vista

Name: Akwa Vista LLC
norm: akwa vista
Industry: Professional Servicesllm

Discovered: Jan 10, 2019
Breach occurred: May 11, 2018 – Aug 31, 2018
Undetected for: 244 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2019
Affected individuals: 65state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email CollectionT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: phishing_link

During the incident: Took immediate action to secure the employee’s email account
Contacted law enforcement
Launched the investigation, with the assistance of a leading forensics firm
Undertook a comprehensive review of the emails that may have been accessed
Began mailing notification letters via United States Postal Service First-Class mail
Offered the New Hampshire residents complimentary one-year memberships in credit monitoring and identity theft protection services from Experian
Changes made: Provided additional training to its employees regarding phishing emails and other cybersecurity issues
Enhanced existing security measures
Implemented additional safeguards and technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 6 · first

New Hampshire State AGFeb 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/akwa-vista-20190206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2019
Raw hash: 53aab9b9066257fb1610bd3d744e821c1f84134282e6137a49288b52549d8405

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAkwa Vista LLC

Victim entityAkwa Vista LLC

Incidentdiscovered Jan 10, 2019

Stated responseTook immediate action to secure the employee’s email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov