HackingFinancial ServicesFinanceStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIIdentity (basic)Financial accountLowContained

EXETER FINANCE LLC

bd_628ada0bd35fb91d · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 24, 2023

Filed

May 22, 2023

To disclose

28 days

Affected

3state residents only

Linked

4 filings

Confidence

66%

Full breach record for EXETER FINANCE LLC →5 incidents on file

Exeter Finance LLC reported a third-party breach involving NCB Management Services, Inc. Unauthorized access occurred Feb 1-4, 2023, affecting NH residents. Data included PII and financial info. NCB contained the incident, notified law enforcement, and provided credit monitoring to 3 affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 82 days

discovery → filing · 28 days

Feb 1, 2023

Begins

Apr 24, 2023

Discovered

May 22, 2023

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_8b205917d5d090002023-05-19 · +3dVerified
Massachusetts State AGbd_20738f7b4f41b8012023-06-07 · +16dVerified
Montana State AGbd_a2f1934af14e20532023-06-07 · +16dCandidate

Name: EXETER FINANCE LLC
norm: exeter finance

Name: EXETER FINANCE LLC
norm: exeter finance
Industry: Financial Servicesllm

Discovered: Apr 24, 2023
Breach occurred: Feb 1, 2023 – Feb 4, 2023
Undetected for: 82 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 19, 2023
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice
Third party: via NCB Management Services, Inc.
Initial access: trusted_relationship

During the incident: NCB has taken steps to eliminate the unauthorized activity on NCB's systems
NCB has notified and is cooperating with law enforcement
NCB has implemented additional security measures to harden its network
NCB has increased its ability to monitor and detect threats
NCB has provided additional data security training of its workforce
NCB will provide identity monitoring services to affected individuals
NCB will send notification letters to potentially affected individuals
Changes made: Implemented additional security measures to harden network
Increased ability to monitor and detect threats
Conducted additional data security training of workforce
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 19 · first

New Hampshire State AG+3d · this page

Massachusetts State AG+19d

Montana State AG+19d

Pattern: first filing May 19 (IN), last Jun 7 (MT) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/exeter-finance-20230522.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2023
Raw hash: 74a1bc3eac8f44e68541f1cb66b7996a98761291e2e6ae93422b2b7af350cae0

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityEXETER FINANCE LLC

Victim entityEXETER FINANCE LLC

Incidentdiscovered Apr 24, 2023

Stated responseNCB has taken steps to eliminate the unauthorized activity on NCB's systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov