Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsTargetedPIIIdentity (basic)LowContained

Brooks Jucha & Associates Insurance Services, Inc.

bd_d7e391668646c6e8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 2, 2022

Filed

Feb 21, 2023

To disclose

38 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Brooks Jucha & Associates Insurance Services, Inc. →

Brooks Jucha & Associates Insurance Services, Inc. d/b/a BJA Partners notified the New Hampshire Attorney General of a data event affecting one NH resident. On June 2, 2022, BJA discovered suspicious activity on an employee email account, likely due to unauthorized access via phishing. The investigation could not determine what specific data was viewed. BJA engaged forensic investigators, secured the account, and provided 12 months of credit monitoring to the affected individual. Notice was sent on February 17, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 38 weeks / 264 days

Jun 2, 2022

Discovered

Feb 21, 2023

Filed

vs. sector median

+20 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_393af0a1f8ae6d5a2023-02-17 · +4dCandidate
Massachusetts State AGbd_acb488cae43285322023-02-17 · +4dVerified
Montana State AGbd_e816bddbb4a8778c2023-02-17 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Brooks Jucha & Associates Insurance Services, Inc.
norm: brooks jucha associates insurance
Also named: Brooks Jucha & Associates Insurance Services, Inc.dba oflegal entity
BJA Partnersdba oftrade name
Industry: Professional Servicesllm

Discovered: Jun 2, 2022
Materiality determined: —
Notification sent: Feb 17, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General's Consumer Protection Bureau
Initial access: phishing_link

During the incident: Secured the email account
Launched an investigation
Engaged a third-party forensic investigator
Performed a programmatic and manual review of the contents of the email account
Notified impacted employers
Provided access to credit monitoring services for twelve (12) months through Experian
Provided guidance on how to better protect against identity theft and fraud
Provided written notice to relevant regulators
Provided written notice to the three major credit reporting agencies
Changes made: Implementing additional safeguards and training to its employees
Reviewing policies, procedures, and processes related to the storage and access of sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(264 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGFeb 17 · first

Massachusetts State AGFeb 17 · first

Montana State AGFeb 17 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/brooks-jucha-associates-insurance-services-dba-bja-partners-20230221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 21, 2023
Raw hash: 1f3c7bc208f27eee59e8deafdf2a29fc844a5d9be6f3239bb1dbe8fb9b9ea0db

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityBrooks Jucha & Associates Insurance Services, Inc.

Incidentdiscovered Jun 2, 2022

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov