HackingStolen CredentialsRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Horizon Actuarial
bd_b63558cff10094f9 · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →UNITE HERE Retirement Fund notified the New Hampshire Attorney General of a data breach involving its vendor, Horizon Actuarial Services, LLC. Unauthorized access to Horizon's servers occurred November 10-11, 2021. The Fund learned of the incident on January 28, 2022. Data potentially compromised included names, SSNs, DOBs, addresses, and phone numbers for 240 New Hampshire residents. The attacker demanded ransom, which was paid in exchange for deletion of data. Horizon implemented security upgrades and provided credit monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d7ae542b7987d6bdCalifornia State AGfiled 2022-04-18Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/unite-here-20220418.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2022
- Raw hash
- 3f971051b6a46802a6741b8ef3df6a6a02634bda581f760d8cca5e6502c2b3f6
Reporting entity
- Name
- UNITE HERE Retirement Fundnorm: unite here retirement
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Incident
- Discovered
- Jan 28, 2022
- Materiality determined
- —
- Notification sent
- Apr 18, 2022
- Affected individuals
- 240
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(80 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.