Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Capital Integration Systems LLC

bd_a770c181e7f04aa0 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 15, 2018

Filed

Jun 25, 2018

To disclose

15 weeks

Affected · nationwide

2,32119 in this filing

Linked

4 filings

Confidence

66%

Full breach record for Capital Integration Systems LLC →

Capital Integration Systems LLC (CAIS) reported a supplemental phishing incident affecting 2,321 individuals, including 19 New Hampshire residents. An employee's Office 365 account was compromised via phishing on Feb 1, 2018, discovered March 15, 2018. PII including SSNs and financial data was potentially exposed. CAIS engaged Navigant for forensics, reset credentials, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 42 days

discovery → filing · 15 weeks / 102 days

Feb 1, 2018

Begins

Mar 15, 2018

Discovered

Jun 25, 2018

Filed

vs. sector median

+5 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_1a1bfd2c1be54af92018-06-25Verified
Massachusetts State AGbd_cb420d88084d25502018-06-25Verified
Montana State AGbd_33a6862b68728ba02018-06-22 · +3dCandidate

Name: Capital Integration Systems LLC
norm: capital integration
Domain: caisgroup.com
Industry: Financial Services

Name: Capital Integration Systems LLC
norm: capital integration
Domain: caisgroup.com
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Mar 15, 2018
Breach occurred: Feb 1, 2018
Undetected for: 42 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 22, 2018
Affected individuals: 2,321state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: The password on the compromised email account was changed immediately by the CAIS Security Team
Microsoft Office 365 Support was engaged immediately by the CAIS Security Team to assist in gathering details of the attack and to contain any further activity
Counsel and forensic experts at Navigant were retained to comprehensively understand the scope of the intrusion
Offering one year of credit monitoring and identity theft protection services to potentially affected individuals through AllClear ID
Changes made: CAIS has implemented several new policies, procedures and security measures with respect to email access and handling of personally identifiable information
CAIS will continue to provide regular reminders and annual training for employees on how to spot and avoid being victimized by phishing emails
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Montana State AGJun 22 · first

Massachusetts State AG+3d

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/capital-integration-20180625.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 25, 2018
Raw hash: f3177851b034a6bd28d4ae8a5cf3f8de8a1b22f936a6e9c8dae5da90b6b7ac17

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCapital Integration Systems LLC

Victim entityCapital Integration Systems LLC

Incidentdiscovered Mar 15, 2018

Stated responseThe password on the compromised email account was changed immediately by the CAIS Security Team

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov