Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Catholic Charities New Hampshire

bd_6cbe8691d44f1e2b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 10, 2019

Filed

Aug 7, 2019

To disclose

8 weeks

Affected

15state residents only

Confidence

67%

Full breach record for Catholic Charities New Hampshire →2 incidents on file

Catholic Charities New Hampshire notified the NH Attorney General of a phishing attack on June 10, 2019, which compromised one email account. Personal information of 15 NH residents was exposed. Notices were mailed on August 5, 2019, with credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Jun 10, 2019

Discovered

Aug 7, 2019

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed15 affectedView incident

Name: Catholic Charities New Hampshire
norm: catholic charities new hampshire
Domain: cc-nh.org

Name: Catholic Charities New Hampshire
norm: catholic charities new hampshire
Domain: cc-nh.org
Industry: Professional Servicesllm

Discovered: Jun 10, 2019
Materiality determined: —
Notification sent: Aug 5, 2019
Affected individuals: 15state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Consumer Protection Bureau, Office of the Attorney General of New Hampshire
Initial access: phishing_link

During the incident: Mailed written notice to the affected individuals and entities
Offer credit monitoring services to all individuals that are notified
Providing training to all staff with email accounts
Implemented phishing awareness program and other appropriate measures
Changes made: Providing training to all staff with email accounts
Implemented phishing awareness program and other appropriate measures to prevent a future incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/catholic-charities-new-hampshire-20190807.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 7, 2019
Raw hash: f5323afe35444fb439fb340fda87e71ed94eba1a7505590ccd5713a15c369e2d

Reporting entityCatholic Charities New Hampshire

Victim entityCatholic Charities New Hampshire

Incidentdiscovered Jun 10, 2019

Stated responseMailed written notice to the affected individuals and entities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov