Social EngineeringTransportation & LogisticsTransportationPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowActive

Connecticut Airport Authority

bd_b01ed5c5d56e6009 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 14, 2017

Filed

Feb 9, 2018

To disclose

12 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Connecticut Airport Authority →

Connecticut Airport Authority notified the NH Attorney General of a phishing incident where employee email credentials were compromised, leading to unauthorized access and the sending of further phishing emails. One New Hampshire resident's name and financial account information may have been exposed. The investigation was ongoing at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 87 days

Nov 14, 2017

Discovered

Feb 9, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_f34792d241b29ad12018-02-09Verified

Name: Connecticut Airport Authority
norm: connecticut airport authority

Name: Connecticut Airport Authority
norm: connecticut airport authority
Industry: Transportation & Logisticsllm

Discovered: Nov 14, 2017
Materiality determined: —
Notification sent: Feb 9, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney GeneralProviding notice of this incident to other state regulators as required
Initial access: phishing_link

During the incident: Immediately changed the employees' email account credentials
Launched an internal investigation
Retained the services of a third party forensic investigation firm
Providing impacted individuals access to twenty-four (24) months of complimentary credit monitoring and identity restoration services with Kroll
Established a dedicated toll-free number for individuals to contact with questions or concerns regarding this incident
Providing these individuals with helpful information on how to protect against identity theft and fraud
Providing notice of this incident to other state regulators as required
Changes made: Reviewing our existing policies and procedures
Providing additional training on phishing emails
Working with our third-party forensic investigation team to ensure the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 9 · first

New Hampshire State AGFeb 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/connecticut-airport-authority-20180209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2018
Raw hash: bb9fa7be966d6d3fd3f8737b420a543639e06a0ddfd7d1ffd421467ef9815d39

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityConnecticut Airport Authority

Victim entityConnecticut Airport Authority

Incidentdiscovered Nov 14, 2017

Stated responseImmediately changed the employees' email account credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov