HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Retirement Consultant Services
bd_bd3dea711a65a5fd · schema v1 · pii pii-v1
Full breach record for Retirement Consultant Services →Retirement Consultant Services (RCS) notified the New Hampshire Attorney General of a data security incident. On September 24, 2020, RCS discovered suspicious activity in its email system. An investigation determined an unauthorized individual accessed an email account containing Social Security numbers, dates of birth, and financial account information. One New Hampshire resident was affected. RCS engaged forensic experts, enhanced network security, increased password complexity, and provided 12 months of credit/identity monitoring through IDX.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/retirement-consultant-services-20210504.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 4, 2021
- Raw hash
- e2ee6cc1bce97e547e830c218f94b0efd3bcdc9050f9a3212fdd33e4f3446aca
Reporting entity
- Name
- Retirement Consultant Servicesnorm: retirement consultant
Victim entity
- Name
- Retirement Consultant Servicesnorm: retirement consultant
Incident
- Discovered
- Sep 24, 2020
- Materiality determined
- —
- Notification sent
- May 3, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 32 weeks(222 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.