Social EngineeringEducationProfessional ServicesEducationPhishingStolen CredentialsTargetedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

The Home for Little Wanderers

bd_bb6c5bcd5984774b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2016

Filed

Apr 25, 2016

To disclose

14 days

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for The Home for Little Wanderers →8 incidents on file

The Home for Little Wanderers (HLW) notified the NH AG of a phishing attack on April 11, 2016, where an attacker spoofed the CEO's email to request W-2 data. An employee complied, sending a report containing names, SSNs, and compensation to the attacker. Two NH residents were affected. HLW notified residents on April 25, 2016, and offered 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 days

Apr 11, 2016

Begins

Apr 11, 2016

Discovered

Apr 25, 2016

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_aab4d221cc3ff2342016-04-25Verified

Name: The Home for Little Wanderers
norm: the home for little wanderers
Domain: thehome.org

Name: The Home for Little Wanderers
norm: the home for little wanderers
Domain: thehome.org
Industry: EducationllmProfessional Servicesllm

Discovered: Apr 11, 2016
Breach occurred: Apr 11, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 25, 2016
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Provided notice to New Hampshire Attorney General
Provided written notice to impacted New Hampshire residents beginning on or about April 25, 2016
Provided voluntary preliminary notice to all affected individuals for whom they had proper email addresses
Provided potentially impacted individuals access to 2 free years of credit monitoring through Experian
Provided information on how to protect against identity theft and fraud
Provided written notice to other state regulators as necessary
Changes made: Provided complimentary access to two free years of credit monitoring and restoration services with Experian’s ProtectMyID Elite product
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 25 · first

New Hampshire State AGApr 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/home-little-wanderers-20160425.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2016
Raw hash: ed2df5aed0f052bf86dcdacc0d45129bd0b4fe17149de6fa6a7474a9f9a9ded7

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Home for Little Wanderers

Victim entityThe Home for Little Wanderers

Incidentdiscovered Apr 11, 2016

Stated responseProvided notice to New Hampshire Attorney General

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov