Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
BARD ASSOCIATES LLC
bd_67fbdf5c0d2be257 · schema v1 · pii pii-v1
Full breach record for BARD ASSOCIATES LLC →Bard Associates, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting two NH residents. An unauthorized party gained access to employee email accounts starting July 8, 2021, via phishing, redirecting emails containing client PII (names, SSNs, addresses, brokerage numbers). Bard contained the breach, alerted law enforcement, and notified clients on January 12, 2022, offering credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7c5674fd8db97a0dMaine State AGfiled 2022-01-28Candidate
- bd_0ad5d22fedce85b3Maine State AGfiled 2022-01-25(3d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bard-associates-20220128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2022
- Raw hash
- 13c7aee8fad9af27a2ee56d456e3c9105063800d772068e0a88deb29f4d2573c
Reporting entity
- Name
- BARD ASSOCIATES LLCnorm: bard associates
Victim entity
- Name
- BARD ASSOCIATES LLCnorm: bard associates
Incident
- Discovered
- Jan 10, 2022
- Materiality determined
- —
- Notification sent
- Jan 12, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.