Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Securities Service Network, LLC

bd_785fc9a0e52a9bb6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 16, 2020

Filed

Apr 23, 2020

To disclose

14 weeks

Affected

1state residents only

Confidence

67%

Full breach record for Securities Service Network, LLC →2 incidents on file

Securities Service Network, LLC notified the NH AG of a data incident affecting one NH resident. On Jan 16, 2020, SSN detected unusual activity in an employee's email account, leading to the discovery of unauthorized access. The incident involved the exposure of the resident's name and SSN. SSN engaged forensic investigators, secured the account, and implemented MFA. The resident was notified on April 23, 2020, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 98 days

Jan 16, 2020

Discovered

Apr 23, 2020

Filed

vs. sector median

+6 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Securities Service Network, LLC
norm: securities service network

Name: Securities Service Network, LLC
norm: securities service network
Industry: Financial Servicesllm

Discovered: Jan 16, 2020
Materiality determined: —
Notification sent: Apr 23, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Secured the email account
Launched an investigation with the assistance of an independent digital forensics firm
Identified individuals whose personal information was contained within the account
Worked to identify up-to-date address information required to notify potentially impacted individuals
Notified the affected New Hampshire resident via letter
Offered twelve months of complimentary credit monitoring and identity theft restoration services through Kroll
Changes made: Enhanced email security through the implementation of multi-factor authentication
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mr-chuck-porter-cpa-20200423.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2020
Raw hash: 1b322a2960cd5d91ef63d416832104a288663a6cf5f40ed8152cd982fe184422

Reporting entitySecurities Service Network, LLC

Victim entitySecurities Service Network, LLC

Incidentdiscovered Jan 16, 2020

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov