Social EngineeringProfessional ServicesProfessional ServicesPhishingBECEmployee Data InvolvedData ExfiltratedGovernment IDIdentity (basic)Financial accountMediumContained

Dennis Group

bd_565272e3ff0b63e7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 5, 2016

Filed

Aug 12, 2016

To disclose

7 days

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Dennis Group →

The Dennis Group, Inc. experienced a business email compromise incident on August 5, 2016, where an attacker spoofed the CEO's email to request W-2 forms. Employee data including names, addresses, SSNs, and compensation info was emailed to the attacker. 3 New Hampshire residents were affected. The company notified the FBI, employees, and provided credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 days

Aug 5, 2016

Begins

Aug 5, 2016

Discovered

Aug 12, 2016

Filed

vs. sector median

18 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9d33cc24ee6600a02016-08-12Verified

Name: The Dennis Group, Inc.
norm: the dennis group

Name: Dennis Group
norm: dennis group
Domain: dennisgroup.com
Industry: Professional Servicesllm

Discovered: Aug 5, 2016
Breach occurred: Aug 5, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 12, 2016
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1566 Phishing
Threat actor: ExternalFinancial
Regulator citations: Providing written notice of this incident to other state regulators as necessary
Initial access: phishing_link

During the incident: Notifying its employees
Notifying the FBI
Arranging to provide its employees with credit monitoring and identify theft restoration services
Changes made: Providing potentially impacted individuals access to two free years of credit monitoring through AlIClear ID
Providing potentially impacted individuals with helpful information on how to protect against identity theft and fraud
Providing the contact information for the national consumer reporting agencies
Providing instructions on how to obtain a free credit report
Providing a reminder to remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports
Providing encouragement to contact the Internal Revenue Service, Federal Trade Commission, state attorney general, and law enforcement to report attempted or actual identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGAug 12 · first

New Hampshire State AGAug 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dennis-group-20160812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2016
Raw hash: 6d95c4efe8492e5ace31df5160e84e708718e8a17865dc8df79371f25cd15c93

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Dennis Group, Inc.

Victim entityDennis Group

Incidentdiscovered Aug 5, 2016

Stated responseNotifying its employees

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov