HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

Integrated Specialty Coverages, LLC

bd_a9b1654f769157a4 · schema v1 · pii pii-v2

Severity

Low

Discovered

Jun 8, 2026

Filed

Aug 27, 2026

To disclose

11 weeks

Affected

65state residents only

Linked

5 filings

Confidence

69%

Full breach record for Integrated Specialty Coverages, LLC →2 incidents on file

Integrated Specialty Coverages, LLC (ISC) notified the NH Attorney General that an unauthorized third party accessed a single ISC account on the DocuSign cloud platform between June 8 and June 11, 2026. The actor downloaded document packages containing names and payment card information for 65 New Hampshire residents. ISC detected the activity on June 8, contained it immediately, and engaged external cybersecurity experts. Notifications were sent to affected individuals on August 27, 2026, including 12 months of complimentary credit monitoring. ISC is implementing remediation measures including MFA expansion and credential reviews.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 80 days

Jun 8, 2026

Begins

Jun 8, 2026

Discovered

Aug 27, 2026

Filed

vs. sector median

+3 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_61ab0f17de1765452026-08-27Verified
Oregon State AGbd_f21c5dd169ed49592026-08-27Verified
Texas State AGbd_c27757065f182d822026-08-28 · +1dCandidate
Massachusetts State AGbd_e3428d7ff6e4eb152026-08-01 · +26dVerified

Name: Integrated Specialty Coverages, LLC
norm: integrated specialty coverages

Name: Integrated Specialty Coverages, LLC
norm: integrated specialty coverages
Industry: Financial Servicesllm

Discovered: Jun 8, 2026
Breach occurred: Jun 8, 2026 – Jun 11, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 27, 2026
Affected individuals: 65state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Contained the activity immediately
Engaged external cybersecurity experts to assist with the investigation and response
Initiated incident response protocols
Notified individuals via U.S. mail
Offered 12 months of complimentary credit monitoring services
Changes made: Review of third-party application credentials, service accounts, API keys, and integration accounts
Review of historical source code repositories for embedded or legacy credentials
Expansion of SSO and MFA across SaaS platforms where possible
Enhanced monitoring / alerting for abnormal activity within critical third-party cloud platforms
Review of sensitive data retained within documents wherever business processes permit
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGAug 1 · first

California State AG+26d

Oregon State AG+26d

New Hampshire State AG+26d · this page

Texas State AG+27d

Pattern: first filing Aug 1 (MA), last Aug 28 (TX) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/integrated-specialty-coverages-20260827.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 27, 2026
Raw hash: 41e58d517ba597e223f92ed7a6541b2022d0134daf8b9b1cd828b113497e0dba

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityIntegrated Specialty Coverages, LLC

Victim entityIntegrated Specialty Coverages, LLC

Incidentdiscovered Jun 8, 2026

Stated responseContained the activity immediately

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov