HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedGovernment IDFinancial accountHealth (basic)MediumContained

Transform SR Holding Management LLC

bd_900d046e5a2b8b92 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 24, 2021

Filed

Jul 26, 2021

To disclose

5 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for Transform SR Holding Management LLC →3 incidents on file

Transform SR Holding Management LLC notified the New Hampshire Attorney General of a security incident where an unauthorized party accessed computer servers between June 3 and June 15, 2021. On June 24, 2021, the company determined that files containing Social Security numbers, financial account numbers, and healthcare insurance information of current and former employees were accessed. The company engaged an outside IT security firm, offered Kroll identity monitoring services, and established a call center.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 21 days

discovery → filing · 5 weeks / 32 days

Jun 3, 2021

Begins

Jun 24, 2021

Discovered

Jul 26, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Oregon State AGbd_3981a27c11f2ef4c2021-07-26Candidate
Massachusetts State AGbd_89cc426ba85e90d22021-07-26Verified
Washington State AGbd_9ae794d9acc6617a2021-07-26Verified
California State AGbd_b02389bb48e9e2fa2021-07-26Verified

Show 2 more filings ↓up to 1d gap

Maine State AGbd_dbf01f83561796b42021-07-26Candidate
South Carolina State AGbd_a67d83f2df3c6e082021-07-27 · +1dVerified

Name: Transform SR Holding Management LLC
norm: transform sr holding management

Name: Transform SR Holding Management LLC
norm: transform sr holding management
Industry: Financial Servicesllm

Discovered: Jun 24, 2021
Breach occurred: Jun 3, 2021 – Jun 15, 2021
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2021
Affected individuals: Not disclosed
Data types: Government IDFinancial accountHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: exploit_public_facing

During the incident: Secured the systems involved and launched an investigation
Investigation with the assistance of an outside IT security firm
Providing substitute notice today by issuing a press release, posting a statement on the Transformco corporate website, and emailing its employees
Offering credit monitoring and identity theft protection services through Kroll
Established a dedicated, toll-free call center
Changes made: Implementing additional security measures to enhance the security of its network
Continuing to provide training to its employees concerning phishing threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Oregon State AGJul 26 · first

Massachusetts State AGJul 26 · first

Washington State AGJul 26 · first

California State AGJul 26 · first

Maine State AGJul 26 · first

New Hampshire State AGJul 26 · first · this page

South Carolina State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/transform-sr-holding-management-20210726.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2021
Raw hash: a7aedda0b91403fd4a6fce42c1ffb371ab88a105e4f1f2c4465ca167350cba36

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTransform SR Holding Management LLC

Victim entityTransform SR Holding Management LLC

Incidentdiscovered Jun 24, 2021

Stated responseSecured the systems involved and launched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov