Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

LifeMark Securities Corp.

bd_acf13729fa7b50c4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 4, 2019

Filed

Nov 20, 2019

To disclose

11 weeks

Affected

95state residents only

Linked

4 filings

Confidence

67%

Full breach record for LifeMark Securities Corp. →

LifeMark Securities Corp. notified the NH AG of a phishing incident on Sept 4, 2019, affecting limited employee email accounts. 95 NH residents notified on Nov 19, 2019. Potential exposure of client PII (names, SSNs, financial info) if sent via email. Remediation included MFA, password changes, and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 77 days

Sep 4, 2019

Discovered

Nov 20, 2019

Filed

vs. sector median

+3 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_d2e9933458154fa22019-11-20Verified
Montana State AGbd_bbaf8c895fd488bf2019-11-19 · +1dCandidate
Massachusetts State AGbd_6708366b46c6c0892019-11-25 · +5dVerified

Name: LifeMark Securities Corp.
norm: lifemark securities

Name: LifeMark Securities Corp.
norm: lifemark securities
Industry: Financial Servicesllm

Discovered: Sep 4, 2019
Materiality determined: —
Notification sent: Nov 19, 2019
Affected individuals: 95state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Hired independent computer forensic experts to help investigate
Changed passwords for all email accounts
Sent notification letters to clients
Changes made: Increased password complexity requirements
Implemented a shorter password expiration policy
Implemented anti-threat protection tools for its email environment
Implemented an enhanced third-party spam filter tool
Implemented multi-factor authentication for email accounts
Offered complimentary credit monitoring and identity restoration services through ID Experts for 12 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGNov 19 · first

California State AG+1d

New Hampshire State AG+1d · this page

Massachusetts State AG+6d

Pattern: first filing Nov 19 (MT), last Nov 25 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lifemark-securities-20191120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2019
Raw hash: 03e52544a3cda002f4eb8ab2ea9bc73ec6f8e79f16a6328434b399f287de4253

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLifeMark Securities Corp.

Victim entityLifeMark Securities Corp.

Incidentdiscovered Sep 4, 2019

Stated responseHired independent computer forensic experts to help investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov