Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Equity Concepts, LLC

bd_7aa880ee89b19859 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 11, 2018

Filed

Nov 29, 2018

To disclose

11 weeks

Affected

1state residents only

Linked

3 filings

Confidence

65%

Full breach record for Equity Concepts, LLC →

Equity Concepts notified clients in November 2018 that phishing emails sent to employees in September 2018 led to unauthorized access of email accounts. Personal information, including names and Social Security numbers, was potentially downloaded. The company secured accounts, hired forensic investigators, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 79 days

Sep 11, 2018

Discovered

Nov 29, 2018

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_a2299797e70ddac72018-11-29Verified
New Hampshire State AGbd_4d60dc735d80f4d12018-11-30 · +1dVerified

Name: Equity Concepts, LLC
norm: equity concepts
Domain: equity-concepts.com

Name: Equity Concepts, LLC
norm: equity concepts
Domain: equity-concepts.com
Industry: Financial Servicesllm

Discovered: Sep 11, 2018
Materiality determined: —
Notification sent: Nov 29, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Secured the e-mail accounts
Retained an outside computer forensic firm to assist us
Offering you a complimentary one-year membership in Experian’s® Identity WorksTM Credit 3B
Changes made: Requiring that employees use two-factor authentication to access our e-mail platform from outside our office
Increasing our ongoing training and monitoring efforts related to cybercrime
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 29 · first

Montana State AGNov 29 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Equity-Concepts-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2018
Raw hash: d6d43397d2887cff820c2a625fe79b44d79c60c8412f3169111cbcb8802d61d7

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEquity Concepts, LLC

Victim entityEquity Concepts, LLC

Incidentdiscovered Sep 11, 2018

Stated responseSecured the e-mail accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov