DisclosureLens
MalwareFinancial ServicesFinanceRansomwareVulnerability ExploitData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Clear Street Management

bd_8ff6c797b3459001 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 28, 2021

Filed

Aug 12, 2021

To disclose

6 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%
Full breach record for Clear Street Management

Clear Street Management LLC reported a security incident to the New Hampshire Attorney General on August 12, 2021. An external actor exploited a vulnerability in a Fortinet VPN appliance on June 25, 2021, gaining access to the network and deploying ransomware. The breach affected one New Hampshire resident, exposing name, address, phone number, driver's license, and SSN. The company terminated access, engaged forensic investigators, patched the vulnerability, and provided 24 months of credit monitoring to the affected individual.

Incident timeline

undetected · 3 days
discovery → filing · 6 weeks / 45 days

Jun 25, 2021

Begins

Jun 28, 2021

Discovered

Aug 12, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Maine State AGAug 12 · first
Massachusetts State AGAug 12 · first
New Hampshire State AGAug 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.