MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDMediumActive

Strategic Benefits Advisors, Inc.

bd_b78dcbba40f9449f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 19, 2021

Filed

Nov 1, 2021

To disclose

6 weeks

Affected

38state residents only

Linked

8 filings

Confidence

67%

Full breach record for Strategic Benefits Advisors, Inc. →2 incidents on file

Strategic Benefits Advisors, Inc. notified the NH AG of a cyberattack discovered on Sept 19, 2021, involving file encryption and data exfiltration. 38 NH residents affected (names, addresses, SSNs). Notices sent Oct 19, 2021. Investigation ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 43 days

Sep 19, 2021

Discovered

Nov 1, 2021

Filed

vs. sector median

12 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

California State AGbd_18a8bd76f672839b2021-11-05 · +4dCandidate
Massachusetts State AGbd_9fcc52b918a8d9a42021-10-28 · +4dVerified
Maine State AGbd_ee70dc26578ff3cb2021-10-28 · +4dVerified
South Carolina State AGbd_eea9a1cc29958d4e2021-11-08 · +7dVerified

Show 3 more filings ↓up to 13d gap

Montana State AGbd_757fc0172a308c292021-11-12 · +11dVerified
Maine State AGbd_ec306f1e59a5016e2021-11-12 · +11dVerified
Indiana State AGbd_c0f1e7ae47b4c21b2021-10-19 · +13dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Strategic Benefits Advisors, Inc.
norm: strategic benefits advisors
Industry: Professional Servicesllm

Discovered: Sep 19, 2021
Materiality determined: —
Notification sent: Oct 19, 2021
Affected individuals: 38state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General

During the incident: Engaged law firm to investigate the nature and scope of the activity
Began a deliberate and thorough assessment of the information impacted
Moved quickly to investigate and respond to the incident
Assessed the security of SBA systems
Notify potentially affected individuals
Reported this incident to law enforcement
Changes made: Implementing additional safeguards and training to its employees
Providing access to credit monitoring services for two (2) years, through Experian
Reviewing existing security policies
Implementing additional measures and enhanced security tools
Providing additional training to employees on data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Indiana State AGOct 19 · first

Massachusetts State AG+9d

Maine State AG+9d

New Hampshire State AG+13d · this page

California State AG+17d

South Carolina State AG+20d

Montana State AG+24d

Maine State AG+24d

Pattern: first filing Oct 19 (IN), last Nov 12 (ME) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/strategic-benefits-advisors-20211101.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 1, 2021
Raw hash: f18785be47a80571b229d36ef80055444726d4f3cd5ccfe59de9d9f18a2d674f

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityStrategic Benefits Advisors, Inc.

Incidentdiscovered Sep 19, 2021

Stated responseEngaged law firm to investigate the nature and scope of the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov