Social EngineeringOtherPhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)Financial accountMediumContained

Sealcoating, Inc.

bd_db65b70924365d93 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 26, 2019

Filed

Dec 6, 2019

To disclose

15 weeks

Affected

23state residents only

Linked

2 filings

Confidence

66%

Full breach record for Sealcoating, Inc. →

Sealcoating Inc. d/b/a Indus notified NH AG of an email compromise affecting 23 NH residents. Unauthorized access occurred June 15–Sept 5, 2019, discovered Aug 26, 2019. Data included SSNs, driver's licenses, and financial accounts. Forensic investigation inconclusive; proactive notice and 12-month Equifax monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 72 days

discovery → filing · 15 weeks / 102 days

Jun 15, 2019

Begins

Aug 26, 2019

Discovered

Dec 6, 2019

Filed

vs. sector median

+6 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_260363e6baab210c2019-12-02 · +4dVerified

Name: Nelson Mullins Riley & Scarborough LLP
norm: nelson mullins riley scarborough

Name: Sealcoating, Inc.
norm: sealcoating
Also named: Sealcoating, Inc.dba oflegal entity
Indusdba oftrade name
Industry: Otherllm

Discovered: Aug 26, 2019
Breach occurred: Jun 15, 2019 – Sep 5, 2019
Undetected for: 72 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 2, 2019
Affected individuals: 23state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged an industry-leading forensic investigation firm
Retained an additional firm to review all data contained within the e-mail accounts
Sent written notice to affected New Hampshire residents
Offered twelve (12) months of Equifax identity monitoring without cost
Changes made: Implemented heightened technical security measures designed to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGDec 2 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sealcoating-20191206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 6, 2019
Raw hash: 7613b8dfdebc6824d80fe90f5f293c52883ef334a020ef908269ca175bda1ec4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNelson Mullins Riley & Scarborough LLP

Victim entitySealcoating, Inc.

Incidentdiscovered Aug 26, 2019

Stated responseEngaged an industry-leading forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov