Social EngineeringTechnologyInformationPhishingTargetedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Behavioral Science Technologies

bd_7863f87b43610814 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 22, 2016

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Behavioral Science Technologies →

Behavioral Science Technology, Inc. (BST) notified the NH Attorney General of a phishing incident on April 19, 2016. An unauthorized individual impersonating a BST executive tricked an employee into sending a password-protected file containing employee names, SSNs, and compensation data. One NH resident was affected. No evidence of data misuse was found. BST notified the FBI and offered one year of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 19, 2016

Begins

Apr 22, 2016

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_69150c381b2745792016-04-27 · +5dVerified

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: Behavioral Science Technologies
norm: behavioral science
Domain: realconsent.com
Industry: Technologyllm

Discovered: —
Breach occurred: Apr 19, 2016
Materiality determined: —
Notification sent: Apr 22, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralCooperating with FBI investigation
Initial access: phishing_link

During the incident: Contacted law enforcement
Offering complimentary identity protection and fraud resolution services for one year
Providing additional training to employees on recognizing phishing schemes
Changes made: Providing additional training to employees on recognizing phishing schemes
Raising awareness of phishing schemes among all employees globally
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 22 · first · this page

Massachusetts State AG+5d

Pattern: first filing Apr 22 (NH), last Apr 27 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/behavioral-science-20160422.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2016
Raw hash: f5212d6d707dbb4d4ec3a8815771cdf09d57fee6b161880b5528ac6740a4ae40

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNorton Rose Fulbright US LLP

Victim entityBehavioral Science Technologies

IncidentPhishing

Stated responseContacted law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov