AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Columbia Threadneedle Investments

bd_c3342e58d5af709b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 11, 2015

To disclose

—

Affected

2state residents only

Confidence

65%

Full breach record for Columbia Threadneedle Investments →

Columbia Threadneedle Investments notified the NH Attorney General of a data breach affecting 2 New Hampshire residents. On October 12, 2015, a scanning error by a third-party vendor resulted in client Future Scholar paperwork being inadvertently uploaded to a different investment advisory firm. The affected data included names and Social Security numbers. The error was corrected immediately. Affected individuals were offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 12, 2015

Begins

Nov 11, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Columbia Threadneedle Investments
norm: columbia threadneedle investments
Domain: ameriprise.com

Name: Columbia Threadneedle Investments
norm: columbia threadneedle investments
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Oct 12, 2015
Materiality determined: —
Notification sent: Nov 10, 2015
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Notified the New Hampshire Office of the Attorney General
Third party: via Mutual Vendor

During the incident: Corrected the error immediately upon notification by the investment advisory firm
Sent notification letters to affected residents
Provided opportunity to enroll for one year of credit monitoring from Equifax at Columbia Threadneedle Investments’ expense
Included a copy of a brochure containing information about how to protect against identity theft
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/columbia-threadneedle-20151110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 11, 2015
Raw hash: 26f1594b39db271b9c992e34e47aaa87a90a6212793bf28004fc9c69a56f8fcf

Reporting entityColumbia Threadneedle Investments

Victim entityColumbia Threadneedle Investments

IncidentUnknown

Stated responseCorrected the error immediately upon notification by the investment advisory firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov