Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Caiafa & Company, LLC
bd_6a89b31b80fc47b8 · schema v1 · pii pii-v1
Full breach record for Caiafa & Company, LLC →Caiafa & Company, LLC reported unauthorized access to an employee's email account via phishing. The attacker accessed emails containing names and Social Security numbers. The company secured the account, investigated, and offered Equifax identity monitoring to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/caiafa-20250128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2025
- Raw hash
- db43be2f38e5eee254cb9c321549f16b55c3d63faeef48389d96dd776dadba18
Reporting entity
- Name
- Caiafa & Company, LLCnorm: caiafa
- Domain
- caiafacompany.com
Victim entity
- Name
- Caiafa & Company, LLCnorm: caiafa
- Domain
- caiafacompany.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.