MalwareOtherRansomwareData EncryptedMulti-Stage ChainIdentity (basic)Government IDMediumContained

Colonial Properties Trust

bd_cd5eb815b287c96f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 23, 2013

Filed

Sep 30, 2013

To disclose

23 weeks

Affected

1state residents only

Confidence

67%

Full breach record for Colonial Properties Trust →

Colonial Properties Trust notified the NH AG of a malware incident detected on April 23, 2013, affecting one NH resident's name and SSN. Malware was eradicated May 3, 2013. Notice sent Sept 27, 2013. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 23 weeks / 160 days

Apr 23, 2013

Discovered

Sep 30, 2013

Filed

vs. sector median

+15 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Colonial Properties Trust
norm: colonial properties

Name: Colonial Properties Trust
norm: colonial properties
Industry: Otherllm

Discovered: Apr 23, 2013
Materiality determined: —
Notification sent: Sep 27, 2013
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Providing notice to other state regulators, and to the national consumer reporting agencies

During the incident: Commenced an internal investigation to identify, isolate, and contain the malware
Engaged independent third-party forensic experts to assist with this investigation
Eradicated the malware in its network
Retained third-party cyber forensic experts Aveshka, Inc. to confirm the malware had properly been identified, isolated and removed from Colonial’s network
Retained privacy and data security legal counsel to assist in our investigation of, and response to the incident
Changes made: Restored the secure functionality of its network services
Offering this individual access to one (1) free year of credit monitoring services and identity restoration services
Providing this individual with information on how to protect against identity theft and fraud
Engaged Experian to provide you with access to a complimentary one-year membership of Experian’s® ProtectMyID® Alert
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(160 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/colonial-properties-20130930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2013
Raw hash: c45b542514cff199f3f539aade417bfdf5588acc67ab55beb076aa6504015471

Reporting entityColonial Properties Trust

Victim entityColonial Properties Trust

Incidentdiscovered Apr 23, 2013

Stated responseCommenced an internal investigation to identify, isolate, and contain the malware

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov