HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)MediumContained

Goody Clancy & Associates, Inc.

bd_4fa8b878f86e997b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 5, 2020

To disclose

—

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for Goody Clancy & Associates, Inc. →

Goody Clancy and Associates, Inc., an architectural firm, notified the New Hampshire Attorney General of an unauthorized access to a company email account between June 30 and August 17, 2020. The incident affected two New Hampshire residents, exposing their names and Social Security numbers. Goody Clancy engaged TransUnion to provide two years of complimentary identity monitoring and implemented additional technical security measures. The investigation concluded that while unauthorized access occurred, there was no evidence of actual misuse of the personal information.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 30, 2020

Begins

Nov 5, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_b7b78bcd7eae68452020-11-05Verified
Maine State AGbd_4fa886bd098e49572020-11-03 · +2dCandidate

Name: Nelson Mullins Riley & Scarborough LLP
norm: nelson mullins riley scarborough

Name: Goody Clancy & Associates, Inc.
norm: goody clancy associates
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jun 30, 2020 – Aug 17, 2020
Materiality determined: —
Notification sent: Nov 4, 2020
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Gordon J. MacDonald
Initial access: valid_credentials

During the incident: Engaged a firm to review all available data within the email account
Provided two (2) years of identity monitoring without cost
Engaged TransUnion to provide identity monitoring at no cost to you for two (2) years
Changes made: Implemented additional technical security measures designed to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGNov 3 · first

Massachusetts State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/goody-clancy-associates-20201105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2020
Raw hash: 0445b1255fafe4c0517756648d1d7e12593a4ed359f4c18966da060ebad45d29

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNelson Mullins Riley & Scarborough LLP

Victim entityGoody Clancy & Associates, Inc.

IncidentUnauthorized Access

Stated responseEngaged a firm to review all available data within the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov