DisclosureLens
AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Financial accountLowResolved

Firstmark Services

bd_9a6a40c62fc3c670 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 4, 2018

Filed

Apr 9, 2018

To disclose

5 days

Affected

1state residents only

Confidence

66%
Full breach record for Firstmark Services →4 incidents on file

Firstmark Services, a subsidiary of Nelnet, Inc., notified the New Hampshire Attorney General of a security breach involving one New Hampshire resident. On April 4, 2018, an email intended for one customer inadvertently included another customer's first name and account number. The company sent a notification letter to the affected individual on April 9, 2018, and provided identity protection precautions. The incident is classified as an error (misdelivery).

Incident timeline

discovery → filing · 5 days

Apr 4, 2018

Begins

Apr 4, 2018

Discovered

Apr 9, 2018

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.