HackingProfessional ServicesProfessional ServicesData EncryptedCustomer Data InvolvedPIIPHIIdentity (basic)Government IDMediumContained

SEIU 775 Benefits Group

bd_c6bce138de23e32b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 4, 2021

Filed

May 5, 2021

To disclose

4 weeks

Affected

15state residents only

Linked

8 filings

Confidence

67%

Full breach record for SEIU 775 Benefits Group →2 incidents on file

SEIU 775 Benefits Group reported a security incident to the New Hampshire Attorney General on May 5, 2021. On or about April 4, 2021, unauthorized individuals gained access to systems and deleted information, including PII and PHI. 15 New Hampshire residents were affected. No evidence of data exfiltration was found. The company engaged forensic consultants, notified law enforcement, and provided one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 31 days

Apr 4, 2021

Discovered

May 5, 2021

Filed

vs. sector median

13 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_4eed9e5d08f4316e2021-05-05Candidate
Montana State AGbd_b60810c0e7a094f82021-05-05Verified
Washington State AGbd_eaff1152ee70bba32021-05-05Verified
California State AGbd_35977db1483cf3b62021-05-07 · +2dVerified

Show 3 more filings ↓up to 5d gap

Indiana State AGbd_2e0149077c836f682021-05-10 · +5dVerified
Massachusetts State AGbd_436e357d5e8054122021-05-10 · +5dVerified
Oregon State AGbd_8267684fde29ea0c2021-05-10 · +5dVerified

Name: SEIU 775 Benefits Group
norm: seiu 775 benefits

Name: SEIU 775 Benefits Group
norm: seiu 775 benefits
Industry: Professional Servicesllm

Discovered: Apr 4, 2021
Materiality determined: —
Notification sent: May 10, 2021
Affected individuals: 15state-resident count only
Data types: PIIPHIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External

During the incident: Secured the affected systems and contain the incident
Notified federal law enforcement authorities and other stakeholders
Retained leading third-party cybersecurity and forensic consultants to investigate the nature and scope of the incident
Engaged legal counsel
Changes made: Continued to work diligently with third-party cybersecurity consultants to further fortify SEIU 775 Benefits Group systems
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Maine State AGMay 5 · first

Montana State AGMay 5 · first

Washington State AGMay 5 · first

New Hampshire State AGMay 5 · first · this page

California State AG+2d

Indiana State AG+5d

Massachusetts State AG+5d

Oregon State AG+5d

Pattern: first filing May 5 (ME), last May 10 (OR) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/seiu-775-benefits-group-20210505.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 5, 2021
Raw hash: b7af080df7c176d9cc0af5cb8cea734b2d49cff244d891c953ccc26657fa8287

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entitySEIU 775 Benefits Group

Victim entitySEIU 775 Benefits Group

Incidentdiscovered Apr 4, 2021

Stated responseSecured the affected systems and contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov