MalwareFinancial ServicesFinanceRansomwareData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Smith Brothers Insurance LLC

bd_d0ff95793983cfc3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 18, 2022

Filed

Jul 3, 2023

To disclose

46 weeks

Affected

4state residents only

Linked

5 filings

Confidence

64%

Full breach record for Smith Brothers Insurance LLC →

Smith Brothers Insurance LLC discovered malware on its system on August 18, 2022. The incident involved unauthorized access to files containing personal information of New Hampshire residents. The company engaged cybersecurity experts, notified the FBI, and sent notices to 4 affected residents on July 3, 2023, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 46 weeks / 319 days

Aug 18, 2022

Discovered

Jun 27, 2023

Scope determined

Jul 3, 2023

Filed

vs. sector median

+37 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_06e8dca1b18385762023-07-03Verified
Maine State AGbd_0a5dee64f750c82f2023-07-03Candidate
Indiana State AGbd_eba31cb5d626b85b2023-07-03Verified
Vermont State AGbd_fee15abdbc93daf92023-07-03Verified

Name: Smith Brothers Insurance LLC
norm: smith brothers insurance

Name: Smith Brothers Insurance LLC
norm: smith brothers insurance
Industry: Financial Servicesllm

Discovered: Aug 18, 2022
Materiality determined: Jun 27, 2023
Notification sent: Jul 3, 2023
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation of this incident and will cooperate with any resulting investigation

During the incident: Engaged leading, independent cybersecurity experts to determine what happened and identify any information that may have been impacted
Took immediate steps to secure its digital environment
Launched an investigation
Conducted a thorough review of the types of personal information impacted
Identified potentially affected individuals
Verified current mailing addresses for those individuals
Notified the Federal Bureau of Investigation of this incident and will cooperate with any resulting investigation
Offering complimentary credit and identity protection services to those individuals whose information may have been affected
Changes made: Working with leading cybersecurity experts to enhance the security of its network
Implemented enhanced technical security measures to minimize the chance that an incident like this could occur in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 46 weeks(319 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJul 3 · first

Maine State AGJul 3 · first

Indiana State AGJul 3 · first

Vermont State AGJul 3 · first

New Hampshire State AGJul 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/smith-brothers-insurance-20230703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 3, 2023
Raw hash: c5675ed15fabce359f3213ab5fac1cc924e2d31919d73eb9d109ec903cb46c43

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySmith Brothers Insurance LLC

Victim entitySmith Brothers Insurance LLC

Incidentdiscovered Aug 18, 2022

Stated responseEngaged leading, independent cybersecurity experts to determine what happened and identify any information that may have been impacted

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov