HackingOtherStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Twin Farms Holdings, LLC

bd_c5f5ae3ea61631ee · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 2, 2020

To disclose

—

Affected

6state residents only

Linked

3 filings

Confidence

66%

Full breach record for Twin Farms Holdings, LLC →

Twin Farms Holdings, LLC notified the NH Attorney General of unauthorized access to an employee email account between March 26 and June 8, 2020. The incident affected 6 NH residents, exposing names, SSNs, and/or driver's license numbers. Twin Farms engaged an IT security firm, secured the account, and offered 1-year credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 26, 2020

Begins

Nov 2, 2020

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_a54b8ce0e62f54bc2020-10-30 · +3dCandidate
Massachusetts State AGbd_fec44fb9a66ac5372020-10-30 · +3dVerified

Name: Twin Farms Holdings, LLC
norm: twin farms

Name: Twin Farms Holdings, LLC
norm: twin farms
Industry: Otherllm

Discovered: —
Breach occurred: Mar 26, 2020 – Jun 8, 2020
Materiality determined: —
Notification sent: Oct 30, 2020
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Took steps to secure the email account
Launched an investigation with the assistance of an IT security firm
Conducted a comprehensive review of the emails and attachments in the account
Began mailing notification letters to the New Hampshire residents
Offered the individuals a complimentary one-year membership to credit monitoring and identity theft protection services
Established a dedicated, toll-free call center
Changes made: Reinforcing education with staff regarding how to identify and avoid suspicious emails
Making additional security enhancements to its email environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 30 · first

Massachusetts State AGOct 30 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/twin-farms-holdings-20201102.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 2, 2020
Raw hash: c053fefa2d3b43d677085552113d16edf9ea003b00623e9b73350cb744ca5c02

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTwin Farms Holdings, LLC

Victim entityTwin Farms Holdings, LLC

IncidentUnauthorized Access

Stated responseTook steps to secure the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov