HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Boxer Property Management Corporation

bd_d4648950076d8f4b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 1, 2021

Filed

Jan 18, 2022

To disclose

16 weeks

Affected

2state residents only

Linked

3 filings

Confidence

67%

Full breach record for Boxer Property Management Corporation →

Boxer Property Management Corporation notified the NH AG of a cyberattack identified around Oct 1, 2021. Personal info of employees, tenants, and investors (names, SSNs, DOB, driver's licenses, financial accounts) was accessed. 2 NH residents notified on Jan 14, 2022. Forensic experts engaged; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 109 days

Oct 1, 2021

Discovered

Jan 18, 2022

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_6044a5e0011358992022-01-14 · +4dCandidate
Indiana State AGbd_4252afbd7a678cc22022-01-13 · +5dVerified

Name: Boxer Property Management Corporation
norm: boxer property management

Name: Boxer Property Management Corporation
norm: boxer property management
Industry: Professional Servicesllm

Discovered: Oct 1, 2021
Materiality determined: —
Notification sent: Jan 14, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralCommunicated with law enforcement
Initial access: valid_credentials

During the incident: Engaged third party forensic experts and counsel experienced in handling cyberattacks
Communicated with law enforcement
Retained Kroll, Inc. to provide notice to affected individuals
Retained Experian to provide free identity theft and credit monitoring services
Changes made: Upgraded firewalls
Implemented additional authentication requirements
Supplemented software and services-based detection and response capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(109 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJan 13 · first

Massachusetts State AG+1d

New Hampshire State AG+5d · this page

Pattern: first filing Jan 13 (IN), last Jan 18 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/boxer-property-management-20220118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 18, 2022
Raw hash: ea2474e36869705ddd3271bdde06cd3898a9f370ea58e6f93f41c53b332b6019

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBoxer Property Management Corporation

Victim entityBoxer Property Management Corporation

Incidentdiscovered Oct 1, 2021

Stated responseEngaged third party forensic experts and counsel experienced in handling cyberattacks

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov