HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Tandym Group, LLC

bd_b967e0d961dfefef · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 5, 2024

To disclose

—

Affected

4state residents only

Linked

5 filings

Confidence

68%

Full breach record for Tandym Group, LLC →2 incidents on file

Tandym Group, LLC notified New Hampshire residents on April 5, 2024, that their personal information was potentially compromised. The incident involved unauthorized access, likely via stolen credentials, affecting 4 New Hampshire residents. Affected data included names, Social Security numbers, dates of birth, and addresses. Tandym provided credit monitoring through TransUnion and guidance on fraud alerts and credit freezes.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Apr 5, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_2b78dc376e7748962024-04-05Candidate
Massachusetts State AGbd_d23ba75283ef83732024-04-05Verified
Indiana State AGbd_edcdbfa14b6decdf2024-04-05Verified
Vermont State AGbd_f882cd7d30af816b2024-04-05Verified

Name: Tandym Group, LLC
norm: tandym group

Name: Tandym Group, LLC
norm: tandym group
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Apr 5, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: providing written notice of this incident to relevant state regulators
Initial access: valid_credentials

During the incident: Investigate and respond to the incident
Assess the security of Tandym systems
Identify potentially affected individuals
Implement additional safeguards and training to its employees
Providing access to credit monitoring services for , through TransUnion
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing individuals with information on protecting against tax fraud
Providing individuals with information on the contact details for the national consumer reporting agencies
Providing individuals with information on how to obtain a free credit report
Providing written notice of this incident to relevant state regulators
Providing written notice of this incident to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGApr 5 · first

Massachusetts State AGApr 5 · first

Indiana State AGApr 5 · first

Vermont State AGApr 5 · first

New Hampshire State AGApr 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tandym-group-20240405.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 5, 2024
Raw hash: 03fc26ac05207318251411c0f171bd840f90a8b0cc897950ba6a8f0219fb7767

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityTandym Group, LLC

Victim entityTandym Group, LLC

IncidentUnauthorized Access

Stated responseInvestigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov