HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

TRH Financial LLC

bd_6ec4094e6a6dfe9c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 22, 2020

Filed

May 26, 2020

To disclose

18 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for TRH Financial LLC →

TRH Financial LLC d/b/a Hawkins Wealth Management notified the NH AG of unauthorized access to an email account on Jan 21-22, 2020, discovered Jan 22, 2020. One NH resident affected; PII (name, address, SSN) involved. Response included forensic investigation, credit monitoring, and employee training.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 18 weeks / 125 days

Jan 21, 2020

Begins

Jan 22, 2020

Discovered

May 26, 2020

Filed

vs. sector median

+9 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_2d3f7dfb8bae98282020-05-22 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: TRH Financial LLC
norm: trh financial
Also named: TRH Financial LLCdba oflegal entity
Hawkins Wealth Managementdba oftrade name
Industry: Financial Servicesllm

Discovered: Jan 22, 2020
Breach occurred: Jan 21, 2020 – Jan 22, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: May 22, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation, with the aid of forensic investigators
Began reviewing the affected email account
Provided written notice of this incident to all affected individuals
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for twelve (12) months, through ID Experts
Changes made: Implement additional safeguards and training to its employees
Review policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(125 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMay 22 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trh-financial-dba-hawkins-wealth-20200526.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2020
Raw hash: 25e7989ed34b68d59394b1dd290a7ec7d7f185e76fe8a45af921ff2590f33f3e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityTRH Financial LLC

Incidentdiscovered Jan 22, 2020

Stated responseLaunched an investigation, with the aid of forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov