Social EngineeringProfessional ServicesProfessional ServicesPhishingBECEmployee Data InvolvedData ExfiltratedGovernment IDIdentity (basic)EmploymentMediumResolved

Laufer Group International

bd_918915f4cb3ac817 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 16, 2018

Filed

Feb 27, 2018

To disclose

11 days

Affected · nationwide

2401 in this filing

Linked

2 filings

Confidence

64%

Full breach record for Laufer Group International →

Laufer Group International Ltd. suffered a business email compromise (BEC) incident on February 16, 2018, involving an email spoofing scam. An attacker impersonated the CEO to trick an employee into sending 2017 W-2 forms for approximately 240 current and former employees. The data exposed included names, addresses, Social Security numbers, and wage information. One affected individual was a New Hampshire resident. The company notified employees, law enforcement (FBI, local police), and tax authorities (IRS, state taxing authorities) on the same day. Identity theft protection services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 days

Feb 16, 2018

Begins

Feb 16, 2018

Discovered

Feb 27, 2018

Filed

vs. sector median

17 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7958446301ef8fb92018-02-26 · +1dVerified

Name: Laufer Group International
norm: laufer group
Domain: lgi.laufer.com

Name: Laufer Group International
norm: laufer group
Domain: lgi.laufer.com
Industry: Professional Servicesllm

Discovered: Feb 16, 2018
Breach occurred: Feb 16, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2018
Affected individuals: 240state + nationwide
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1566 Phishing
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation of the incident through its IC3 online reporting systemNotified the Internal Revenue Service and state taxing authorities about this incident
Initial access: phishing_link

During the incident: Notified its current employees of the incident via email on February 16
Sent a written notice dated February 26, 2018 to all affected individuals
Notified the Federal Bureau of Investigation of the incident through its IC3 online reporting system
Contacted its local police department
Notified the Internal Revenue Service and state taxing authorities about this incident
Changes made: Offered to provide the affected individuals with an "IDShield" identity theft protection individual plan for one year
Offered to reimburse individuals who purchase the "LifeLock Standard" product from IDShield
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 26 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/laufer-20180227.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 27, 2018
Raw hash: 4371b224abafd6dd4656680145819270932dc40440a2173bdc5b126c9efe589f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLaufer Group International

Victim entityLaufer Group International

Incidentdiscovered Feb 16, 2018

Stated responseNotified its current employees of the incident via email on February 16

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov