HackingFinancial ServicesFinanceStolen CredentialsDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighActive

Greater New York Mutual Insurance Company

bd_6e6faea7acd47bd2 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 1, 2021

Filed

Oct 21, 2021

To disclose

20 weeks

Affected · nationwide

34,00053 in this filing

Linked

6 filings

Confidence

66%

Full breach record for Greater New York Mutual Insurance Company →

Supplemental notice from GNY regarding a cybersecurity event occurring May 23, 2021, discovered June 1, 2021. Approximately 34,000 individuals affected nationwide (53 in NH). PII compromised included SSN, driver's license, bank info, and medical payment info. GNY retained forensic investigators and provided 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 9 days

discovery → filing · 20 weeks / 142 days

May 23, 2021

Begins

Jun 1, 2021

Discovered

Oct 21, 2021

Filed

vs. sector median

+12 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_44cd6334c0c926b12021-10-19 · +2dVerified
Maine State AGbd_eaf31a6c03fc65782021-10-18 · +3dVerified
New Hampshire State AGPYSAbd_97e251fbeeb06f632021-08-24 · +58dVerified
Maine State AGbd_ae4a4ef2663fb3a22021-08-23 · +59dCandidate

Show 1 more filing ↓up to 64d gap

Indiana State AGbd_726f6221750f46432021-08-18 · +64dVerified

Name: Squire Patton Boggs
norm: squire patton boggs
Domain: squirepattonboggs.com

Name: Greater New York Mutual Insurance Company
norm: greater new york mutual insurance
Industry: Financial Servicesllm

Discovered: Jun 1, 2021
Breach occurred: May 23, 2021
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 22, 2021
Affected individuals: 34,000state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Updated notice provided to New Hampshire Department of Justice
Initial access: valid_credentials

During the incident: Retained an IT firm to conduct a thorough forensic investigation
Took steps to contain the incident
Eliminating the vulnerability that was used by the unauthorized actor
Implementing additional security measures
Notified affected individuals
Changes made: Strengthened our system
Provided twenty-four (24) months of credit monitoring and identity theft insurance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(142 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

Indiana State AGAug 18 · first

Maine State AG+5d

New Hampshire State AG+6d

Maine State AG+61d

Montana State AG+62d

New Hampshire State AG+64d · this page

Pattern: first filing Aug 18 (IN), last Oct 21 (NH) — a 64-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/greater-new-york-mutual-insurance-20211021.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 21, 2021
Raw hash: a790cdc6beb6fcb2e1215b0de68d1e6e04192a91df35677d366e98dd1fcc1d87

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySquire Patton Boggs

Victim entityGreater New York Mutual Insurance Company

Incidentdiscovered Jun 1, 2021

Stated responseRetained an IT firm to conduct a thorough forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov