HackingOtherStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

The Country Club at Woodfield, Inc.

bd_641fb16d67ef6498 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 10, 2022

Filed

Aug 15, 2022

To disclose

5 weeks

Affected

1state residents only

Confidence

66%

The Country Club at Woodfield, Inc. notified the NH AG of a data event affecting 1 NH resident. Unauthorized access occurred as early as Jan 18, 2022, discovered July 10, 2022. Data copied included names and SSNs. Notices sent Aug 12, 2022. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 173 days

discovery → filing · 5 weeks / 36 days

Jan 18, 2022

Begins

Jul 10, 2022

Discovered

Aug 15, 2022

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: The Country Club at Woodfield, Inc.
norm: country club at woodfield
Domain: woodfield.org
Industry: Otherllm

Discovered: Jul 10, 2022
Breach occurred: Jan 18, 2022
Undetected for: 173 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 12, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney GeneralNotified federal law enforcement
Initial access: valid_credentials

During the incident: Moved systems offline
Launched an investigation with the assistance of outside cybersecurity specialists
Notified federal law enforcement
Providing access to credit monitoring services for two (2) years, through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implementing additional safeguards and training to its employees
Policies and procedures are being reviewed and enhanced where possible
Implementing additional technical safeguards
Implementation of an advanced threat detection tool in our environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/country-club-woodfield-20220815.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 15, 2022
Raw hash: ab1cc9e717f182ba56e0864d90fb1e00ed59850b22dcc27782dfebc079c97b30

Reporting entityMullen Coughlin LLC

Victim entityThe Country Club at Woodfield, Inc.

Incidentdiscovered Jul 10, 2022

Stated responseMoved systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov