HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

J.C. Cannistraro

bd_a6fe13de4b9545e9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 4, 2020

Filed

Dec 28, 2020

To disclose

12 weeks

Affected

143state residents only

Confidence

67%

Full breach record for J.C. Cannistraro →3 incidents on file

J.C. Cannistraro, LLC notified the New Hampshire Attorney General on December 11, 2020, of a data security incident detected on October 4, 2020. Unauthorized access resulted in the exfiltration of personal information, including names, Social Security numbers, and bank account numbers, affecting approximately 143 New Hampshire residents. Cannistraro contained the threat, restored data, and engaged external forensic investigators. Affected residents were offered one year of credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 85 days

Oct 4, 2020

Discovered

Dec 28, 2020

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed143 affectedView incident

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: J.C. Cannistraro
norm: jc cannistraro
Industry: Professional Servicesllm

Discovered: Oct 4, 2020
Materiality determined: —
Notification sent: Dec 11, 2020
Affected individuals: 143state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Disabling all unauthorized access to its network
Restored all data
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering a complimentary one-year membership with a credit monitoring service
Changes made: Continuing to evaluate its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/j-c-cannistraro-20201228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 28, 2020
Raw hash: 224e5ca6ad786eac860a2a9e642aec93fac6657268235a8108dac48b3002b92c

Reporting entityMCDONALD HOPKINS LLC

Victim entityJ.C. Cannistraro

Incidentdiscovered Oct 4, 2020

Stated responseDisabling all unauthorized access to its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov