Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
Starkweather & Shepley Insurance Brokerage Incorporated
bd_83c9486daa8c3a63 · schema v1 · pii pii-v1
Full breach record for Starkweather & Shepley Insurance Brokerage Incorporated →Starkweather & Shepley Insurance Brokerage, Inc. reported unauthorized access to a single employee email account from Feb 29 to Apr 11, 2024, following suspicious activity likely caused by phishing. The incident affected 2 New Hampshire residents and 3 Rhode Island residents, exposing personal information. Starkweather disabled the account, reset credentials, engaged third-party specialists, and offered credit monitoring services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/starkweather-shepley-insurance-brokerage-20241024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2024
- Raw hash
- e03ac438aa9df4d91f929327d1a6d529e4d3a2b34f7c6258d3192ba2a210eabf
Reporting entity
- Name
- Starkweather & Shepley Insurance Brokerage Incorporatednorm: starkweather shepley insurance brokerage
Victim entity
- Name
- Starkweather & Shepley Insurance Brokerage Incorporatednorm: starkweather shepley insurance brokerage
Incident
- Discovered
- Feb 29, 2024
- Materiality determined
- Sep 26, 2024
- Notification sent
- Oct 24, 2024
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Providing written notice of this incident to relevant state regulators, as necessary
- Initial access
- phishing_link
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.