Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

NorthStar Leasing

bd_a2dff5045dca199c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 12, 2022

Filed

Dec 19, 2022

To disclose

14 weeks

Affected

40state residents only

Linked

5 filings

Confidence

66%

Full breach record for NorthStar Leasing →

North Star Leasing notified the NH AG of unauthorized access to an employee email account between Aug 10 and Sep 8, 2022. Discovered Sep 12, 2022. 40 NH residents affected. Data included names, SSNs, financial account numbers, and driver's license numbers. Response included forensic investigation, email security enhancements, and 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 14 weeks / 98 days

Aug 10, 2022

Begins

Sep 12, 2022

Discovered

Dec 19, 2022

Filed

vs. sector median

+5 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_68ad5ebc229f94412022-12-12 · +7dCandidate
Massachusetts State AGbd_7804506fa657e1df2022-12-12 · +7dVerified
Indiana State AGbd_98cb74d5c10927762022-12-12 · +7dVerified
Maine State AGbd_eb9b1c19e5728b592022-12-12 · +7dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: NorthStar Leasing
norm: northstar leasing
Industry: Financial Servicesllm

Discovered: Sep 12, 2022
Breach occurred: Aug 10, 2022 – Sep 8, 2022
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 12, 2022
Affected individuals: 40state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took steps to secure the account
Initiated a comprehensive investigation with the assistance of computer forensic specialists
Performing a programmatic and manual review of the email account
Providing potentially affected individual access to complimentary identity monitoring services for 24 months through Experian
Providing potentially affected individuals with guidance on how to protect against identity theft and fraud
Changes made: Enhanced our email security protocols to further detect and respond to anomalous activity
Reviewing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGDec 12 · first

Massachusetts State AGDec 12 · first

Indiana State AGDec 12 · first

Maine State AGDec 12 · first

New Hampshire State AG+7d · this page

Pattern: first filing Dec 12 (MT), last Dec 19 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/north-star-leasing-20221219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 19, 2022
Raw hash: 2c0d0f5aec88fa23ee06303fefdb78680eb916a66281aaf2c0b13c1b83bb1759

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityNorthStar Leasing

Incidentdiscovered Sep 12, 2022

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov