HackingFinancial ServicesFinanceTargetedIdentity (basic)Government IDFinancial accountMediumContained

Transcend Capital

bd_b1924291f87e02d4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 20, 2012

Filed

Aug 20, 2012

To disclose

≤1 day

Affected

6state residents only

Linked

2 filings

Confidence

64%

Full breach record for Transcend Capital →2 incidents on file

Transcend Capital, LLC reported a data breach in New Hampshire affecting 6 clients. An unknown hacker breached a data server in the Austin, TX branch office during the week of August 13-19, 2012. The server contained client PII, SSNs, and financial account data. No data access was confirmed, but clients were notified and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · ≤1 day / 0 days

Aug 13, 2012

Begins

Aug 20, 2012

Discovered

Aug 20, 2012

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_208ece3fe4b843362012-09-20 · +31dCandidate

Name: Transcend Capital
norm: transcend capital
Domain: transcendcapital.com

Name: Transcend Capital
norm: transcend capital
Domain: transcendcapital.com
Industry: Financial Servicesllm

Discovered: Aug 20, 2012
Breach occurred: Aug 13, 2012 – Aug 19, 2012
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified state and federal law enforcement officials
Initial access: exploit_public_facing

During the incident: Disabled the server port accessed on our external fire wall
Changed all passwords for every server on the network
Notified all clients in writing
Encouraged clients to change their passwords
Encouraged clients to sign up for a credit monitoring service
Notified state and federal law enforcement officials
Conducting a review of the firm's security policies, procedures and practices
Changes made: Disabled the server port accessed on our external fire wall
Changed all passwords for every server on the network
Researching additional tracing tools
Implementing additional security measures to validate client identities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 20 · first · this page

California State AG+31d

Pattern: first filing Aug 20 (NH), last Sep 20 (CA) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/transcend-capital-20120820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2012
Raw hash: 7079c6c5fbe09f329ad414530c522d5601029bfab0da4088d17950a36e96c77c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTranscend Capital

Victim entityTranscend Capital

Incidentdiscovered Aug 20, 2012

Stated responseDisabled the server port accessed on our external fire wall

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov