Social EngineeringFinancial ServicesProfessional ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Financial accountLowContained

L.L. Bean, Inc.

bd_9ab75285270dde96 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 8, 2022

Filed

Sep 30, 2022

To disclose

16 weeks

Affected

127state residents only

Confidence

67%

Full breach record for L.L. Bean, Inc. →

Berry, Dunn, McNeil & Parker, LLC notified the NH AG of a phishing incident affecting L.L. Bean client data. 127 NH residents notified. Unauthorized access to one employee email via phishing. Data included names and financial info. No evidence of misuse. Forensics engaged, credentials reset, IDX protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 114 days

Jun 8, 2022

Discovered

Sep 30, 2022

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed127 affectedView incident

Name: Berry, Dunn, McNeil & Parker, LLC
norm: berry dunn mcneil parker

Name: L.L. Bean, Inc.
norm: ll bean
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Jun 8, 2022
Materiality determined: —
Notification sent: Sep 22, 2022
Affected individuals: 127state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: previously notified on September 16, 2022
Initial access: phishing_link

During the incident: Isolated the unauthorized access to one account
Reset the user’s credentials
Hired external computer forensic specialists
Offering identity theft protection services through IDX
Changes made: Implemented our incident response protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(114 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/berry-dunn-mcneil-parker-20220930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2022
Raw hash: f6bc37746e84d8d18897e87fa661956a14c5a25eb6ee3b3b3269ba52e6fbe1d5

Reporting entityBerry, Dunn, McNeil & Parker, LLC

Victim entityL.L. Bean, Inc.

Incidentdiscovered Jun 8, 2022

Stated responseIsolated the unauthorized access to one account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov