Social EngineeringOtherPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Inventors Hall of Fame

bd_5b457c476bc609a4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 3, 2021

Filed

May 4, 2021

To disclose

13 weeks

Affected

685state residents only

Linked

3 filings

Confidence

69%

Full breach record for Inventors Hall of Fame →

National Inventors Hall of Fame notified Washington AG of a phishing incident affecting one employee email account. Unauthorized access occurred Jan 27–Feb 3, 2021. Investigation confirmed exposure of names, SSNs, driver's licenses, DOBs, and financial account info for 685 Washington residents. Notifications sent May 3, 2021, including credit monitoring offers.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d13 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 7 days

discovery → filing · 13 weeks / 90 days

Jan 27, 2021

Begins

Feb 3, 2021

Discovered

May 4, 2021

Filed

vs. sector median

+5 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_b1c379bd485e15152021-05-03 · +1dCandidate
New Hampshire State AGbd_43cc6b17263e164e2021-05-07 · +3dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Inventors Hall of Fame
norm: inventors hall of fame
Industry: Otherllm

Discovered: Feb 3, 2021
Breach occurred: Jan 27, 2021 – Feb 3, 2021
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 3, 2021
Affected individuals: 685state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General Consumer Protection Division
Initial access: phishing_link

During the incident: Contained the email account
Implemented additional security measures
Commenced a prompt and thorough investigation
Engaged outside cybersecurity professionals for forensic investigation
Conducted manual document review
Provided written notification to affected residents
Offered complimentary one-year membership with a credit monitoring service
Changes made: Implemented additional security measures
Continually evaluates and modifies practices and internal controls to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMay 3 · first

Washington State AG+1d · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10456.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 4, 2021
Raw hash: 44a2f23c36efc1ae143442dc6a574ef310a69dfaee1f5510707c19f61d6f0d08

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityInventors Hall of Fame

Incidentdiscovered Feb 3, 2021

Stated responseContained the email account

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com