MalwareRansomwareVulnerability ExploitData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Clear Street Management
bd_8ff6c797b3459001 · schema v1 · pii pii-v1
Full breach record for Clear Street Management →Clear Street Management LLC reported a security incident to the New Hampshire Attorney General on August 12, 2021. An external actor exploited a vulnerability in a Fortinet VPN appliance on June 25, 2021, gaining access to the network and deploying ransomware. The breach affected one New Hampshire resident, exposing name, address, phone number, driver's license, and SSN. The company terminated access, engaged forensic investigators, patched the vulnerability, and provided 24 months of credit monitoring to the affected individual.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c2db6f7acede55fdMaine State AGfiled 2021-08-12Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/clear-street-management-20210812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 12, 2021
- Raw hash
- 02ab84df8dfbdfca7964c6d47305e7f92febd4ef8273ff9b11102860377a32f7
Reporting entity
- Name
- Clear Street Managementnorm: clear street management
Victim entity
- Name
- Clear Street Managementnorm: clear street management
Incident
- Discovered
- Jun 28, 2021
- Materiality determined
- —
- Notification sent
- Aug 12, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.