HackingProfessional ServicesProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

Travel Leaders Group, LLC

bd_5bdd03579f24a5ed · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 24, 2018

To disclose

—

Affected

2state residents only

Linked

2 filings

Confidence

67%

Full breach record for Travel Leaders Group, LLC →

Travel Leaders Group notified NH AG of a cyber-incident between June 14 and July 25, 2018. A third-party contractor employee wrongfully accessed and edited customer data. Two NH residents were affected; their names, addresses, and credit card numbers were accessed. Kroll is providing identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 14, 2018

Begins

Oct 24, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_2a2962144479ee9a2018-10-22 · +2dVerified

Name: Travel Leaders Group, LLC
norm: travel leaders

Name: Travel Leaders Group, LLC
norm: travel leaders
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jun 14, 2018 – Jul 25, 2018
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Partner
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: trusted_relationship

During the incident: Offering clients a package of services to provide identity monitoring at no cost, provided by Kroll
Heightened the security measures that it takes to ensure that its employees do not exceed their authorization
Changes made: Heightened the security measures that it takes to ensure that its employees do not exceed their authorization when accessing Travel Leaders Group customer information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 22 · first

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tlg-20181024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 24, 2018
Raw hash: b8431e4ad6a5308bd3d043f274b99d94b6c755d169560fdf23b344cfd3b675b4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTravel Leaders Group, LLC

Victim entityTravel Leaders Group, LLC

IncidentThird-Party / Supply Chain

Stated responseOffering clients a package of services to provide identity monitoring at no cost, provided by Kroll

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov