MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDMediumActive

ExecuSearch Holdings LLC

bd_da9872e18802d37d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2021

Filed

Jun 4, 2021

To disclose

16 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for ExecuSearch Holdings LLC →2 incidents on file

ExecuSearch Holdings LLC notified the NH AG of a ransomware incident discovered Feb 12, 2021. An unknown actor encrypted systems and exfiltrated data including names and SSNs. One NH resident affected. Response included law enforcement notification, password resets, MFA implementation, and 12 months of Experian credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

discovery → filing · 16 weeks / 112 days

Feb 1, 2021

Begins

Feb 12, 2021

Discovered

Jun 4, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_693fb49ae456bbf12022-01-20 · +230dCandidate
Montana State AGbd_aebd7a1dbe120c7b2022-01-20 · +230dVerified
Maine State AGbd_bfab0bdf23f166692022-01-20 · +230dVerified
New Hampshire State AGbd_af2cf665c7c845452022-01-24 · +234dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: ExecuSearch Holdings LLC
norm: execusearch holdings
Industry: Professional Servicesllm

Discovered: Feb 12, 2021
Breach occurred: Feb 1, 2021 – Feb 12, 2021
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 27, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Moved quickly to investigate and respond to the incident
Assess the security of ExecuSearch systems
Notify potentially affected individuals
Notify law enforcement
Reset passwords
Changes made: Working to implement additional safeguards and training to its employees
Reviewing and enhancing existing policies and procedures
Adding additional data security software
More broadly implementing multifactor authentication to our network environment
Providing access to credit monitoring services for twelve (12) months, through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

New Hampshire State AGJun 4 · first · this page

Indiana State AG+230d

Montana State AG+230d

Maine State AG+230d

New Hampshire State AG+234d

Pattern: first filing Jun 4 (NH), last Jan 24 (NH) — a 234-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/execusearch-holdings-20210604.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2021
Raw hash: 184727ddd0e38b8ad0c1151e6e5a1c6ecde6e941a25cc4aa254f008f2a141b59

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityExecuSearch Holdings LLC

Incidentdiscovered Feb 12, 2021

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov