HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Hungerford Nichols

bd_d025760b7388da11 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 18, 2022

Filed

Feb 1, 2023

To disclose

24 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Hungerford Nichols →

Hungerford Nichols reported unauthorized external access to its network in New Hampshire. The incident potentially exposed the name, SSN, and DOB of one NH resident. The firm engaged forensic investigators, enhanced technical security, and provided 12 months of credit monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 weeks / 167 days

Aug 18, 2022

Discovered

Feb 1, 2023

Filed

vs. sector median

+5 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_2ef9750488b851c42023-02-01Verified

Name: Hungerford Nichols
norm: hungerford nichols

Name: Hungerford Nichols
norm: hungerford nichols
Industry: Professional Servicesllm

Discovered: Aug 18, 2022
Materiality determined: —
Notification sent: Feb 1, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Conducted an internal investigation
Engaged a forensic security firm to further investigate the incident and confirm the security of Hungerford’s computer systems and network
Undertook efforts to reduce the risk of a similar incident occurring in the future, including enhancing its technical security measures
Provided notice of the incident to the potentially involved individual
Offered twelve (12) months of complimentary credit monitoring and identity theft protection services
Changes made: Enhancing its technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(167 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 1 · first

New Hampshire State AGFeb 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hungerford-nichols-20230201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 1, 2023
Raw hash: 1b7f59dd9f0d6d60e496bee75f5ed009bba2b7574f4a2077b952c9845a7be2be

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHungerford Nichols

Victim entityHungerford Nichols

Incidentdiscovered Aug 18, 2022

Stated responseConducted an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov