HackingStolen CredentialsRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Horizon Actuarial
bd_57e4879b692c8a62 · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →New York Teamsters Conference Pension and Retirement Fund reported a data breach involving its vendor, Horizon Actuarial Services, LLC. Unauthorized access to Horizon's servers occurred November 10-11, 2021. The attacker claimed to have stolen names, SSNs, and DOBs of 17 New Hampshire residents. Horizon paid the attackers to delete data. The Fund notified the NH AG on March 22, 2022, and offered credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_acc2dcb63f662ce2New Hampshire State AGfiled 2022-03-22Verified
- bd_60c050db559ca233New Hampshire State AGfiled 2022-03-24(2d gap)Candidate
- bd_0f74d080348e1e13Delaware State AGfiled 2022-04-11(20d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-york-teamsters-conference-pension-retirement-fund-20220322.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2022
- Raw hash
- a847bb466fe176858dacdf2ad9bbcbfebb9c358a7e25d0a881fc3b5b49811eec
Reporting entity
- Name
- The New York Teamsters Conference Pension and Retirement Fundnorm: the new york teamsters conference pension and retirement
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Incident
- Discovered
- Jan 13, 2022
- Materiality determined
- —
- Notification sent
- Mar 22, 2022
- Affected individuals
- 17
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Third party
- via Horizon Actuarial Services, LLCvendor
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.