Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
St. Andrew's Resources for Seniors System
bd_b2f1ce8c52124084 · schema v1 · pii pii-v1
Full breach record for St. Andrew's Resources for Seniors System →St. Andrew’s Resources for Seniors System notified New Hampshire residents of a security incident occurring around February 8, 2024. An unauthorized actor accessed employee email accounts via suspicious activity, likely phishing. The breach impacted personal information of 3 NH residents. The organization engaged forensic specialists, notified law enforcement, enhanced security protocols, and offered 12 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/st-andrews-resources-seniors-system-20250207.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2025
- Raw hash
- b269d0e17a3f18e2f220823fe048cf4b2a02c15f4a4bdf7ac7c57d82a0eaefcd
Reporting entity
- Name
- St. Andrew's Resources for Seniors Systemnorm: st andrew s resources for seniors system
- Domain
- standrews1.com
Victim entity
- Name
- St. Andrew's Resources for Seniors Systemnorm: st andrew s resources for seniors system
- Domain
- standrews1.com
Incident
- Discovered
- Feb 8, 2024
- Materiality determined
- Jan 6, 2025
- Notification sent
- Feb 7, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified law enforcementproviding written notice of this incident to relevant state regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 12 months(365 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.