Social EngineeringProfessional ServicesProfessional ServicesPhishingTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancialMediumContained

Sandler & Travis Trade Advisory Services, LLC

bd_811f932a7dbb69af · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 19, 2016

Filed

Jun 13, 2016

To disclose

8 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Sandler & Travis Trade Advisory Services, LLC →

Sandler & Travis Trade Advisory Services, LLC (STTAS) reported a phishing incident to the New Hampshire Attorney General. On April 14, 2016, an employee received a spear-phishing email requesting 2015 W-2 data. The data was disclosed before the fraud was detected on April 19, 2016. One New Hampshire resident was affected. STTAS engaged Kroll for notification, call center support, and two years of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 8 weeks / 55 days

Apr 14, 2016

Begins

Apr 19, 2016

Discovered

Jun 13, 2016

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Butzel Long Attorneys and Counselors
norm: butzel long attorneys and counselors

Name: Sandler & Travis Trade Advisory Services, LLC
norm: sandler travis trade advisory
Industry: Professional Servicesllm

Discovered: Apr 19, 2016
Breach occurred: Apr 14, 2016
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 27, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralProvided notice to other states' officials if required by those states' laws
Initial access: phishing_link

During the incident: Secured the services of Kroll to provide employees with written notice
Provided access to a call center to address questions
Provided two years of identity monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(55 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sandler-travis-20160613.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 13, 2016
Raw hash: 36e950573e79c3480daddc25faf8a4be8fa4416ae7dc04a3ea84d6d57306c92c

Reporting entityButzel Long Attorneys and Counselors

Victim entitySandler & Travis Trade Advisory Services, LLC

Incidentdiscovered Apr 19, 2016

Stated responseSecured the services of Kroll to provide employees with written notice

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov