Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Michael Saunders & Company

bd_9b261e761534c6a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2017

Filed

Jan 18, 2018

To disclose

32 weeks

Affected

7state residents only

Linked

3 filings

Confidence

67%

Full breach record for Michael Saunders & Company →

Michael Saunders & Company reported a phishing incident where an employee provided email credentials after receiving a malicious email. The compromised account contained personal information including names, addresses, Social Security numbers, driver's license numbers, and financial account details. The company notified 7 New Hampshire residents and retained a forensic firm. The investigation was ongoing as of January 2018.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 226 days

Jun 6, 2017

Discovered

Jan 18, 2018

Filed

vs. sector median

+23 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_37c55f774515a9642017-12-18 · +31dCandidate
Massachusetts State AGbd_48bd61c868a3ed332017-12-18 · +31dVerified

Name: Michael Saunders & Company
norm: michael saunders

Name: Michael Saunders & Company
norm: michael saunders
Industry: Financial Servicesllm

Discovered: Jun 6, 2017
Materiality determined: —
Notification sent: Dec 18, 2017
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Submitted confirmation to the New Hampshire Attorney GeneralProviding written notice of this incident to other state regulators as necessary
Initial access: phishing_link

During the incident: Launched an internal investigation to determine the nature and scope of this event
Retained a leading forensic investigation firm to assist with these efforts
Conducted a detailed review of the contents of the email account
Secured the involved MSC email accounts
Provided all potentially affected individuals access to 12 free months of credit monitoring and identity repair services through AllClear ID
Provided potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Provided a phone number for potentially affected individuals to contact with questions or concerns
Changes made: Implementing additional safeguards to protect the security of information in its system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(226 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

New Hampshire State AGDec 18 · first

Massachusetts State AGDec 18 · first

New Hampshire State AG+31d · this page

Pattern: first filing Dec 18 (NH), last Jan 18 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/michael-saunders2-20180118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 18, 2018
Raw hash: b7170ba5ce19280d2e765b13b75e341bfc82108821049e2672473183cabc3669

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMichael Saunders & Company

Victim entityMichael Saunders & Company

Incidentdiscovered Jun 6, 2017

Stated responseLaunched an internal investigation to determine the nature and scope of this event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov