HackingBrute ForceStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
Sirius Federal
bd_a641d8dc75eb6cc6 · schema v1 · pii pii-v1
Full breach record for Sirius Federal →Sirius Federal, LLC reported a data breach to the New Hampshire Attorney General on January 31, 2024. Unauthorized access occurred between July 31 and August 2, 2023, via brute force attack on the company's VPN. The incident impacted 6 New Hampshire residents, exposing personal information including financial account and payment card data for a subset. The company engaged third-party experts, disabled compromised credentials, notified law enforcement, and offered 2 years of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7875f0a074bf5b6eMaine State AGfiled 2024-01-31Verified by operator
- bd_579778adb1846cb6Vermont State AGfiled 2024-01-19(12d gap)Verified
- bd_62d7ca0f719fa8a7Montana State AGfiled 2024-01-19(12d gap)Candidate
- bd_780c87eef2158753Indiana State AGfiled 2024-01-19(12d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sirius-federal-cdw-g-20240131.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 31, 2024
- Raw hash
- c4ae7ef030144b5fe40561bb9f91b78609a39227de40f922c86541051ad1a264
Reporting entity
- Name
- Sirius Federalnorm: sirius federal
Victim entity
- Name
- Sirius Federalnorm: sirius federal
Incident
- Discovered
- Aug 2, 2023
- Materiality determined
- Dec 20, 2023
- Notification sent
- Jan 19, 2024
- Affected individuals
- 6
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1110 Brute ForceT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
Compliance
- Time to disclose
- 26 weeks(182 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.