PhysicalFinancial ServicesHealthcareFinanceTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumResolved

RSC Insurance Brokerage, Inc.

bd_c20c25322bd1f7ce · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 22, 2019

Filed

Apr 4, 2019

To disclose

10 weeks

Affected

11state residents only

Linked

7 filings

Confidence

66%

Full breach record for RSC Insurance Brokerage, Inc. →5 incidents on file

RSC Insurance Brokerage, Inc. notified the NH Attorney General of a laptop theft on August 23, 2018. The incident involved PHI and PII (SSN, DOB, names) of 11 NH residents. RSC completed its investigation by Jan 22, 2019, and mailed notifications on April 2, 2019. No evidence of unauthorized access was found. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 152 days

discovery → filing · 10 weeks / 72 days

Aug 23, 2018

Begins

Jan 22, 2019

Discovered

Apr 4, 2019

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_82bcb10591e7a1b32019-04-03 · +1dVerified
Massachusetts State AGbd_8e133f0ad4fffaa02019-04-03 · +1dVerified
California State AGbd_7fe23bd39baf57cf2019-03-06 · +29dVerified
Oregon State AGbd_74f496ed77915c142019-03-01 · +34dVerified

Show 2 more filings ↓up to 34d gap

Montana State AGbd_dd877224ae9825622019-03-01 · +34dVerified
HHS OCRbd_fe0100e3a4b7fbac2019-03-01 · +34dVerified

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: RSC Insurance Brokerage, Inc.
norm: rsc insurance brokerage
Industry: Financial ServicesllmHealthcarellm

Discovered: Jan 22, 2019
Breach occurred: Aug 23, 2018
Undetected for: 152 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 2, 2019
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Notified law enforcement
Changed the employee's account credentials
Launched an investigation with the assistance of a leading cyber security firm
Offered individuals whose Social Security numbers were potentially involved complimentary one-year memberships in credit monitoring and identity theft protection services from Experian
Changes made: Enhancing security measures on its devices that store personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(72 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Oregon State AGMar 1 · first

Montana State AGMar 1 · first

HHS OCRMar 1 · first

California State AG+5d

California State AG+33d

Massachusetts State AG+33d

New Hampshire State AG+34d · this page

Pattern: first filing Mar 1 (OR), last Apr 4 (NH) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rsc-insurance-brokerage-20190404.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 4, 2019
Raw hash: 25ea693435a434e4d87203115d70ffb1b22243af282b2dc3a504dbc565ca17e0

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBAKER & HOSTETLER LLP

Victim entityRSC Insurance Brokerage, Inc.

Incidentdiscovered Jan 22, 2019

Stated responseNotified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov