Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Lincoln Financial Securities Corporation

bd_9d17bc8ea18f88cd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 2, 2020

Filed

Jul 6, 2021

To disclose

12 months

Affected

2state residents only

Confidence

66%

Full breach record for Lincoln Financial Securities Corporation →5 incidents on file

Lincoln Financial Securities supplements notice of email compromise affecting 2 NH residents. Unauthorized access occurred May 1-3, 2020 via phishing. Data exposed: SSN, DOB, bank info, driver's license, medical info. Discovered July 2, 2020. Remediation: password resets, email config changes, credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 62 days

discovery → filing · 12 months / 369 days

May 1, 2020

Begins

Jul 2, 2020

Discovered

Jul 6, 2021

Filed

vs. sector median

+44 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: LINCOLN NATIONAL CORPORATION
norm: lincoln national
Domain: lincolnfinancial.com

Name: Lincoln Financial Securities Corporation
norm: lincoln financial securities
Industry: Financial Servicesllm

Discovered: Jul 2, 2020
Breach occurred: May 1, 2020 – May 3, 2020
Undetected for: 62 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 24, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice
Initial access: phishing_link

During the incident: Secured the compromised email account
Provided an alert to all advisors regarding a phishing email
Required all advisors to do a password reset for their email accounts
Worked with the third party service provider that managed the email accounts to determine the nature of the access and make configuration changes
Changes made: Offering complimentary credit monitoring services for one year (initial) and two years (supplemental)
Continually assess cybersecurity policies and procedures, enhancing them as appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 months(369 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lincoln-financial-20210706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2021
Raw hash: 1294b4f70b8621a9eef9d8995032ab2015d197ea73cc9099cc2690755b3bec45

Reporting entityLINCOLN NATIONAL CORPORATION

Victim entityLincoln Financial Securities Corporation

Incidentdiscovered Jul 2, 2020

Stated responseSecured the compromised email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov