HackingOtherDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumActive

VT Group

bd_9dc62b503d251abc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 4, 2016

Filed

Mar 3, 2017

To disclose

21 weeks

Affected

8state residents only

Linked

2 filings

Confidence

66%

Full breach record for VT Group →

VT Group notified NH AG of a data event affecting 8 NH residents. On Oct 4, 2016, FBI informed VT of potential unauthorized network access. Payroll info (SSN, banking, name, address) may have been accessed. VT engaged forensic experts, coordinated with FBI, and offers 24 months of credit monitoring via Kroll. Investigation ongoing as of March 2017.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 150 days

Oct 4, 2016

Discovered

Mar 3, 2017

Filed

vs. sector median

+13 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3f5b144642de2cad2017-03-08 · +5dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: VT Group
norm: vt group
Industry: Otherllm

Discovered: Oct 4, 2016
Materiality determined: —
Notification sent: Mar 7, 2017
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBIProvided notice to the New Hampshire Attorney GeneralProviding notice to other regulators and consumer reporting agencies where required

During the incident: Engaged a network security and data privacy expert to investigate the incident
Worked with the FBI to coordinate the investigation
Taking steps to increase network security within the environment
Offering 24 months of complimentary credit monitoring and identity restoration services with Kroll
Changes made: Working with data security experts to ensure the future security of data stored on its network
Taking steps to better secure employees' data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(150 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 3 · first · this page

Massachusetts State AG+5d

Pattern: first filing Mar 3 (NH), last Mar 8 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/vt-group-20170303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2017
Raw hash: 91f180c49d415feeae632a2bb6953e7a3b7fe3a32c90207c0a78cc750f8deb02

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityVT Group

Incidentdiscovered Oct 4, 2016

Stated responseEngaged a network security and data privacy expert to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov