HackingRetail & ConsumerRetailTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumActive

Forest City Trade Group, LLC

bd_a37a1f81f6f78dc8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 24, 2021

Filed

Jul 29, 2021

To disclose

5 weeks

Affected

142state residents only

Linked

5 filings

Confidence

66%

Full breach record for Forest City Trade Group, LLC →

Forest City Trade Group, LLC notified the NH AG of a cyber security attack beginning June 21, 2021, discovered June 24, 2021. Unauthorized access affected 142 NH residents, exposing names, addresses, SSNs, and HSA bank account numbers. FCTG notified law enforcement, engaged forensic investigators, and deployed endpoint monitoring. Affected individuals received 24 months of ID theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 5 weeks / 35 days

Jun 21, 2021

Begins

Jun 24, 2021

Discovered

Jul 29, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_faefac60f6217a2d2021-07-22 · +7dVerified
Maine State AGbd_ad3fa854f8cd6cc72021-07-21 · +8dVerified
Massachusetts State AGbd_dcf1ae3b080962542021-07-21 · +8dVerified
Montana State AGbd_b9fa5f6bd616b0ca2021-07-20 · +9dCandidate

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Forest City Trade Group, LLC
norm: forest city trade
Industry: Retail & Consumerllm

Discovered: Jun 24, 2021
Breach occurred: Jun 21, 2021
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 21, 2021
Affected individuals: 142state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the Attorney General, State of New Hampshire
Initial access: exploit_public_facing

During the incident: Promptly notified the FBI and other applicable members of law enforcement
Engaged a third-party cybersecurity firm to provide expert assistance with securing its systems, remediation efforts, and to perform a forensic investigation into the nature and scope of the incident
Deployed enterprise-wide endpoint monitoring solutions to detect any continued presence of the threat actors in its systems
Changes made: FCTG continues to assess its security practices and will take step, as necessary, to minimize the risk of a similar incident occurring in the future
Arranged for twenty-four-months of complimentary ID theft protection and monitoring services for adults and identity protection services for minor children
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 20 · first

Maine State AG+1d

Massachusetts State AG+1d

Oregon State AG+2d

New Hampshire State AG+9d · this page

Pattern: first filing Jul 20 (MT), last Jul 29 (NH) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/forest-city-trade-20210729.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2021
Raw hash: a550388ce60d6734b3adfe069e01d89e25940e4951c750be87fafa8c6fc5d470

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJackson Lewis

Victim entityForest City Trade Group, LLC

Incidentdiscovered Jun 24, 2021

Stated responsePromptly notified the FBI and other applicable members of law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov