HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
ICON Capital Group, LLC
bd_681e78a7385b5dd9 · schema v1 · pii pii-v1
Full breach record for ICON Capital Group, LLC →ICON Capital, LLC reported a data event to the New Hampshire Attorney General on January 8, 2021. On October 23, 2020, suspicious network activity was detected, leading to an investigation by third-party forensic experts. An unauthorized actor accessed and exfiltrated files containing names, addresses, and Social Security numbers. One New Hampshire resident was affected. ICON notified law enforcement, provided two years of credit monitoring via TransUnion, and implemented additional security safeguards.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/icon-capital-20210119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 19, 2021
- Raw hash
- 859f36430eec9ce30f73a0b5769ea17be8314f973295d4221595a3fa6be9e435
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- ICON Capital Group, LLCnorm: icon capital
Incident
- Discovered
- Oct 23, 2020
- Materiality determined
- —
- Notification sent
- Jan 8, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement and is cooperating in the investigationNotifying other relevant state regulators
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.