Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

Whirley Drinkworks

bd_6bd32cbbb484b21b · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 4, 2020

Filed

May 29, 2020

To disclose

25 days

Affected

1state residents only

Confidence

66%

Full breach record for Whirley Drinkworks →

Whirley Drinkworks notified the NH AG of a phishing incident in late 2019 that compromised email accounts, exposing SSNs, driver's licenses, and financial data of 1 NH resident. Discovered May 4, 2020. Remediation included password resets and security enhancements.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 155 days

discovery → filing · 25 days

Dec 1, 2019

Begins

May 4, 2020

Discovered

May 29, 2020

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: Whirley Drinkworks
norm: whirley drinkworks
Industry: Retail & Consumerllm

Discovered: May 4, 2020
Breach occurred: Dec 1, 2019
Undetected for: 155 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 28, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: submitted notification to New Hampshire Attorney General pursuant to N.H. Rev. Stat. § 359 -C:20
Initial access: phishing_link

During the incident: Began an investigation
Engaged leading independent cybersecurity experts to provide assistance
Took steps to secure all email accounts
Thorough review of the emails and attachments within the impacted accounts
Enhanced the security of its systems and network
Universal password resets
Additional employee security protocols to prevent unauthorized access
Updated our internal procedures
Implemented additional safeguards to minimize the chance that an incident like this could occur in the future
Providing twelve months of complimentary identity monitoring services to potentially impacted consumers through ID Experts
Changes made: Enhanced the security of its systems and network
Universal password resets
Additional employee security protocols to prevent unauthorized access
Updated our internal procedures
Implemented additional safeguards to minimize the chance that an incident like this could occur in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/whirley-drinkworks-20200529.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2020
Raw hash: f3d73f52cf8c9224960ab21da6f9dcb563109b46aa46f83df82dc07d0d765544

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityWhirley Drinkworks

Incidentdiscovered May 4, 2020

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov