Social EngineeringFinanceIdentity (basic)Government IDMediumContained

Georgetown Financial Group

bd_5e20de845b90b137 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 20, 2023

To disclose

—

Affected

1state residents only

Linked

6 filings

Confidence

68%

Full breach record for Georgetown Financial Group →2 incidents on file

Georgetown Financial Group (GFG) issued a breach notification to one New Hampshire resident on September 20, 2023, following a phishing incident that compromised an email account. GFG secured the account, investigated the scope, and provided one year of complimentary Experian IdentityWorks monitoring and identity restoration services to the affected individual. The incident involved the potential exposure of personal and government-issued identification data.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 20, 2023

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_7113f068babf834a2023-09-20Verified
Maine State AGbd_c65c90fd157dd2bc2023-09-20Candidate
Massachusetts State AGbd_38b5b98993a453502023-08-11 · +40dVerified
Maine State AGbd_86957beedc88dd922023-08-11 · +40dCandidate

Show 1 more filing ↓up to 40d gap

Indiana State AGbd_9ec59a3f8c6d36562023-08-11 · +40dVerified

Name: Georgetown Financial Group
norm: georgetown financial

Name: Georgetown Financial Group
norm: georgetown financial

Discovered: —
Materiality determined: —
Notification sent: Sep 20, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: providing written notice of this incident to relevant regulators
Initial access: phishing_link

During the incident: Moved quickly to investigate and respond to the incident
Secure the email account
Assess the security of GFG email system
Identify potentially impacted individuals
Reviewing and enhancing existing policies and procedures
Providing access to monitoring services for , through Experian, to individuals whose personal information was potentially impacted by this incident, at no cost to these individuals
Providing potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing individuals with information on how to obtain a free credit report
Providing written notice of this incident to relevant regulators
Changes made: Reviewing and enhancing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Massachusetts State AGAug 11 · first

Maine State AGAug 11 · first

Indiana State AGAug 11 · first

Montana State AG+40d

Maine State AG+40d

New Hampshire State AG+40d · this page

Pattern: first filing Aug 11 (MA), last Sep 20 (NH) — a 40-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/georgetown-financial-group-20230920.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 20, 2023
Raw hash: fc8fa87e7f72aa74914d1c0f328c50d76ba164b0ef189fe3092d21851b81b3db

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityGeorgetown Financial Group

Victim entityGeorgetown Financial Group

IncidentPhishing

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov