Social EngineeringOtherPhishingStolen CredentialsMulti-Stage ChainTargetedIdentity (basic)Government IDMediumContained

Special Olympics Kentucky

bd_bec603dabff53d70 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 12, 2018

Filed

Dec 26, 2018

To disclose

15 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Special Olympics Kentucky →

Special Olympics Kentucky notified NH AG of a phishing incident where employee credentials were compromised. Unauthorized access occurred April 17–Sept 11, 2018. Two NH residents affected; data included names, SSNs, and driver's licenses. Investigation engaged, credentials reset, global password reset implemented, and 12-month credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 148 days

discovery → filing · 15 weeks / 105 days

Apr 17, 2018

Begins

Sep 12, 2018

Discovered

Dec 26, 2018

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Special Olympics Kentucky
norm: special olympics kentucky
Industry: Otherllm

Discovered: Sep 12, 2018
Breach occurred: Apr 17, 2018 – Sep 11, 2018
Undetected for: 148 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 17, 2018
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney Generalwill also be providing notice of this event to other state regulators as required by law
Initial access: phishing_link

During the incident: Immediately launched an investigation with the assistance of a leading forensic investigation firm
Change the employees' email credentials
Instituted a global password reset for all users on the Special Olympics Kentucky email system
Reviewed the contents of the accounts through manual and programmatic processes
Changes made: Exploring the implementation of multi-factor authentication processes to protect the security of information
Providing potentially impacted individuals with complimentary access to credit monitoring and identity theft protection services for 12 months through AllClear ID
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(105 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/special-olympics-kentucky-20181226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 26, 2018
Raw hash: fc49f6321b15ca64ff7260189fc9da12c5b36792eba7593688c50f11896ce9cc

Reporting entityMullen Coughlin LLC

Victim entitySpecial Olympics Kentucky

Incidentdiscovered Sep 12, 2018

Stated responseImmediately launched an investigation with the assistance of a leading forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov