Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Hartwell Financial Group
bd_834139275b8a7cfc · schema v1 · pii pii-v1
Full breach record for Hartwell Financial Group →Hartwell Financial Services notified the NH AG of a security incident where an unauthorized individual accessed an employee email account containing PII (SSN, driver's license, financial account numbers) starting August 12, 2022. Two NH residents were affected. Notifications were mailed December 13, 2022, offering one year of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hartwell-financial-20221214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 14, 2022
- Raw hash
- 950e3b6e1927fdf79cfc6d7e3cf92e8f66875b66fed7a6db6f8ce54d4d397251
Reporting entity
- Name
- Hartwell Financial Groupnorm: hartwell financial
- Domain
- hartwellfinancialgroup.com
Victim entity
- Name
- Hartwell Financial Groupnorm: hartwell financial
- Domain
- hartwellfinancialgroup.com
Incident
- Discovered
- Aug 12, 2022
- Materiality determined
- Oct 14, 2022
- Notification sent
- Dec 13, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- phishing_link
Compliance
- Time to disclose
- 18 weeks(124 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.