HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Lindberg & Ripple

bd_b17e9c1bdacda0b9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 14, 2021

Filed

Oct 17, 2022

To disclose

44 weeks

Affected

11state residents only

Linked

4 filings

Confidence

66%

Full breach record for Lindberg & Ripple →

Lindberg & Ripple notified the NH AG of unauthorized access to two employee email accounts between April and December 2021. The incident affected 11 NH residents, exposing names, SSNs, driver's licenses, and financial account info. Lindberg secured accounts, investigated, and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 240 days

discovery → filing · 44 weeks / 307 days

Apr 18, 2021

Begins

Dec 14, 2021

Discovered

Oct 17, 2022

Filed

vs. sector median

+25 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_15669381f8e844f02022-10-12 · +5dVerified
Maine State AGbd_3f6645b46480b1ec2022-10-12 · +5dCandidate
Indiana State AGbd_e5c4b97159b6b4982022-10-12 · +5dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Lindberg & Ripple
norm: lindberg ripple
Industry: Professional Servicesllm

Discovered: Dec 14, 2021
Breach occurred: Apr 18, 2021 – Dec 14, 2021
Undetected for: 240 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 12, 2022
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Secured the email account
Launched an investigation
Worked with specialists to perform a comprehensive programmatic and manual review
Provided access to credit monitoring services for one year through IDX
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Notified state regulators
Changes made: Reviewing existing policies and procedures
Implementing additional safeguards to further secure the information in their systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(307 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGOct 12 · first

Maine State AGOct 12 · first

Indiana State AGOct 12 · first

New Hampshire State AG+5d · this page

Pattern: first filing Oct 12 (MA), last Oct 17 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lindberg-ripple-20221017.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2022
Raw hash: 4c0050965dadaeef5d41e0826def6ac673985534cc1c5edb6ab61e5e88e29277

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityLindberg & Ripple

Incidentdiscovered Dec 14, 2021

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov