Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedCredentialsPIILowContained

SANIBEL CAPTIVA TRUST COMPANY

bd_af4d5e7ff58a778f · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 31, 2018

Filed

Sep 10, 2018

To disclose

6 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for SANIBEL CAPTIVA TRUST COMPANY →

Sanibel Captiva Trust Company notified NH AG of a phishing incident affecting 2 NH residents. Unauthorized access to email occurred July 30-Aug 1, 2018. Phishing emails appeared to come from Sanibel. Kroll engaged for identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 weeks / 41 days

Jul 30, 2018

Begins

Jul 31, 2018

Discovered

Sep 10, 2018

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7e97422de605d5fa2018-09-06 · +4dVerified

Name: Wyrick Robbins Yates & Ponton LLP
norm: wyrick robbins yates ponton

Name: SANIBEL CAPTIVA TRUST COMPANY
norm: sanibel captiva
Industry: Financial Servicesllm

Discovered: Jul 31, 2018
Breach occurred: Jul 30, 2018 – Aug 1, 2018
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Sep 7, 2018
Affected individuals: 2state-resident count only
Data types: CredentialsPII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Office of Attorney General pursuant to N.H. Rev. Stat. Ann. § 359-C:201(b)
Initial access: phishing_link

During the incident: Engaged a forensic investigator to determine whether the email system, or any other information system, was breached
Called and sent letters to its clients to warn them of the phishing emails
Engaged Kroll to provide identity protection services to them at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 6 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sanibel-captive-trust-20180910.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 10, 2018
Raw hash: d545cbc27bc7e4ff6648c3d42e1ac70c77136b91cf0e4146c68955a158e64762

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWyrick Robbins Yates & Ponton LLP

Victim entitySANIBEL CAPTIVA TRUST COMPANY

Incidentdiscovered Jul 31, 2018

Stated responseEngaged a forensic investigator to determine whether the email system, or any other information system, was breached

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov