PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

M Holdings Securities, Inc.

bd_5c5e32376e6ba57e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 31, 2016

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

63%

Full breach record for M Holdings Securities, Inc. →3 incidents on file

M Holdings Securities, Inc. reported the theft of an employee's company laptop from a parked car on July 29, 2016. The device may have contained personal information including names, addresses, Social Security numbers, driver's license numbers, and financial account numbers. The company notified law enforcement, retained a forensic investigator, and offered one year of complimentary identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 29, 2016

Begins

Aug 31, 2016

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_25c3a8096ec671072016-08-31Verified
Montana State AGbd_66a20c84434024762016-08-31Candidate
Massachusetts State AGbd_c9a4a7165c15ae5f2016-09-06 · +6dVerified

Name: M Holdings Securities, Inc.
norm: m holdings securities

Name: M Holdings Securities, Inc.
norm: m holdings securities
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jul 29, 2016
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Reported the theft to law enforcement
Retained a forensic investigator
Conducted a comprehensive review of our data security procedures
Offering twelve months of complimentary identity protection services
Notified law enforcement and will continue to assist them
Changes made: Employees are participating in a security training program to educate our employees on how to better protect our clients’ and employees’ information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGAug 31 · first

Montana State AGAug 31 · first

California State AGAug 31 · first · this page

Massachusetts State AG+6d

Pattern: first filing Aug 31 (NH), last Sep 6 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-63675
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2016
Raw hash: c845cdf25710647ae41c6e24d39a2af0eb210d140d488852be24bcf0b6a3ff47

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityM Holdings Securities, Inc.

Victim entityM Holdings Securities, Inc.

IncidentUnknown

Stated responseReported the theft to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov