MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDFinancial accountMediumContained

ExecuSearch Holdings LLC

bd_af2cf665c7c84545 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2021

Filed

Jan 24, 2022

To disclose

49 weeks

Affected · nationwide

2019 in this filing

Linked

5 filings

Confidence

66%

Full breach record for ExecuSearch Holdings LLC →2 incidents on file

ExecuSearch Holdings LLC filed a supplemental notice with the New Hampshire AG regarding a ransomware incident. The actor encrypted systems and exfiltrated data on Feb 12, 2021. The breach affected 19 NH residents (20 total previously notified), exposing names, SSNs, driver's licenses, and financial accounts. Remediation included MFA and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 49 weeks / 346 days

Feb 12, 2021

Begins

Feb 12, 2021

Discovered

Jan 24, 2022

Filed

vs. sector median

+31 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_693fb49ae456bbf12022-01-20 · +4dCandidate
Montana State AGbd_aebd7a1dbe120c7b2022-01-20 · +4dVerified
Maine State AGbd_bfab0bdf23f166692022-01-20 · +4dVerified
New Hampshire State AGbd_da9872e18802d37d2021-06-04 · +234dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: ExecuSearch Holdings LLC
norm: execusearch holdings
Industry: Professional Servicesllm

Discovered: Feb 12, 2021
Breach occurred: Feb 12, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 20, 2022
Affected individuals: 20state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reporting this incident to state regulators, where necessary

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of ExecuSearch systems
Notified potentially affected individuals
Notified law enforcement
Reset passwords
Provided access to credit monitoring services for twelve (12) months through IDX
Changes made: Implementing additional safeguards and training to its employees
Enhanced existing policies and procedures
Adding additional data security software
More broadly implementing multifactor authentication to its network environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(346 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

New Hampshire State AGJun 4 · first

Indiana State AG+230d

Montana State AG+230d

Maine State AG+230d

New Hampshire State AG+234d · this page

Pattern: first filing Jun 4 (NH), last Jan 24 (NH) — a 234-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/execusearch-holdings-20220124.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 24, 2022
Raw hash: 3c5f849709b24c42c2d87a7e0bdda585404ddb59111e027def98fbe2518e3573

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityExecuSearch Holdings LLC

Incidentdiscovered Feb 12, 2021

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov