HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

West Creek Financial, Inc.

bd_d2a2d70f96d21f78 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2018

Filed

Mar 22, 2018

To disclose

23 days

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for West Creek Financial, Inc. →

West Creek Financial, Inc. notified the NH Attorney General of a data security incident occurring Feb 1-27, 2018. Unauthorized access via stolen credentials compromised customer PII and financial data for 3 NH residents. West Creek engaged the FBI, notified affected individuals, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 26 days

discovery → filing · 23 days

Feb 1, 2018

Begins

Feb 27, 2018

Discovered

Mar 22, 2018

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_46377f03e2a590652018-03-23 · +1dVerified

Name: West Creek Financial, Inc.
norm: west creek financial

Name: West Creek Financial, Inc.
norm: west creek financial
Industry: Financial Servicesllm

Discovered: Feb 27, 2018
Breach occurred: Feb 1, 2018 – Feb 27, 2018
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Federal Bureau of Investigations cybercrimes unit
Initial access: valid_credentials

During the incident: Contacted the Federal Bureau of Investigations cybercrimes unit
Cooperating fully in that investigation
Notified all New Hampshire residents affected
Offering twelve months of free credit monitoring through Experian
Implemented increased and continuous monitoring of all its internal systems for access and use
Increasing its defenses against future intrusions
Maximizing the security of its IT infrastructure and computer systems
Review and revise its data protections policies
Changes made: Implemented increased and continuous monitoring of all its internal systems for access and use
Increasing its defenses against future intrusions
Maximizing the security of its IT infrastructure and computer systems
Review and revise its data protections policies
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 22 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/west-creek-financial-20180322.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 22, 2018
Raw hash: 22bc119929e347269904977295454f65bb65ac6bf982f6e86f1df02c2a6c97d8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWest Creek Financial, Inc.

Victim entityWest Creek Financial, Inc.

Incidentdiscovered Feb 27, 2018

Stated responseContacted the Federal Bureau of Investigations cybercrimes unit

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov