HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

COVERICA, INC.

bd_c4f6395068b8203f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 21, 2023

Filed

Apr 25, 2024

To disclose

18 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for COVERICA, INC. →

CoVerica, Inc., an insurance agency, notified the NH Attorney General of a data security incident discovered on December 21, 2023. Unauthorized access to a single employee's email account occurred, potentially exposing personal information of one New Hampshire resident. CoVerica engaged cybersecurity experts, secured the tenant, and offered credit monitoring via Experian. Notification was sent on April 25, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 126 days

Dec 21, 2023

Discovered

Apr 25, 2024

Filed

vs. sector median

+10 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_b9e266255c6fe1162024-04-25Candidate
Indiana State AGbd_c5851940ac09bf352024-04-25Verified
Massachusetts State AGbd_ba77f8ff6392af4e2024-04-26 · +1dVerified

Name: COVERICA, INC.
norm: coverica

Name: COVERICA, INC.
norm: coverica
Industry: Financial Servicesllm

Discovered: Dec 21, 2023
Materiality determined: —
Notification sent: Apr 25, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email CollectionT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took steps to secure its email tenant
Engaged independent cybersecurity experts to conduct an investigation
Conducted a comprehensive review of the data contained in the email account
Notified one (1) New Hampshire resident of the incident via First-Class U.S. mail
Offering you complimentary credit monitoring and identity protection services through Experian
Changes made: Implemented additional security measures to help reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(126 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGApr 25 · first

Indiana State AGApr 25 · first

New Hampshire State AGApr 25 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/coverica-20240425.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2024
Raw hash: 8f17be2ca5f4ee41618d471edcc5428070eb9328c39bdc8e4c3afa906b24dc0a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCOVERICA, INC.

Victim entityCOVERICA, INC.

Incidentdiscovered Dec 21, 2023

Stated responseTook steps to secure its email tenant

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov