Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Securities Training Corporation

bd_802c667e066a7741 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 28, 2019

Filed

Sep 20, 2019

To disclose

23 days

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for Securities Training Corporation →

Securities Training Corporation notified NH AG of unauthorized access to 3 NH residents' PII (names, credit card numbers) via compromised employee email account between April-June 2019. Discovered Aug 2019. Offered 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 134 days

discovery → filing · 23 days

Apr 16, 2019

Begins

Aug 28, 2019

Discovered

Sep 20, 2019

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_a915399bc559d24f2019-09-13 · +7dVerified
Montana State AGbd_c02f850f719b90c12019-09-13 · +7dCandidate

Name: Securities Training Corporation
norm: securities training

Name: Securities Training Corporation
norm: securities training
Industry: Financial Servicesllm

Discovered: Aug 28, 2019
Breach occurred: Apr 16, 2019 – Jun 14, 2019
Undetected for: 134 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Immediately took steps to prevent any further unauthorized disclosure
Offering the individuals twelve (12) months of free credit monitoring and identity theft assistance
Changes made: Working to prevent this from happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 13 · first

Montana State AGSep 13 · first

New Hampshire State AG+7d · this page

Pattern: first filing Sep 13 (MA), last Sep 20 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/securities-training-20190920.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 20, 2019
Raw hash: e878775e2685e94843c0cadf33dd79c9b7e767d6434cc9590e638cf9c2c32fdb

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySecurities Training Corporation

Victim entitySecurities Training Corporation

Incidentdiscovered Aug 28, 2019

Stated responseImmediately took steps to prevent any further unauthorized disclosure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov