Social EngineeringEnergy & UtilitiesUtilitiesPhishingBECRansom DemandedData ExfiltratedEmployee Data InvolvedPIIIdentity (basic)Government IDHighContained

Trinity Solar

bd_dd12a4e9af17c949 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 11, 2016

Filed

Apr 12, 2016

To disclose

5 weeks

Affected · nationwide

1,1565 in this filing

Confidence

66%

Full breach record for Trinity Solar →

Trinity Solar notified NH AG of a phishing incident where an employee sent 1,156 W-2s (containing PII/SSN) to an imposter. 5 NH residents affected. Incident discovered March 11, 2016. Notices sent April 13, 2016. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 32 days

Mar 11, 2016

Begins

Mar 11, 2016

Discovered

Apr 12, 2016

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,156 affectedView incident

Name: Archer & Greiner, A Professional Corporation
norm: archer greiner
Domain: testorigin.trinity-solar.com

Name: Trinity Solar
norm: trinity solar
Domain: testorigin.trinity-solar.com
Also named: Trinity Heating & Air, Inc.dba oflegal entity
Trinity Solardba oftrade name
Industry: Energy & Utilitiesllm

Discovered: Mar 11, 2016
Breach occurred: Mar 11, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 13, 2016
Affected individuals: 1,156state + nationwide
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified NH Department of Justice
Initial access: phishing_link

During the incident: Notified local law enforcement in Wall Township, New Jersey
Retained the services of LifeLock, Inc. to provide twelve months of free credit monitoring
Educate employees on the growing threat of “spear fishing” attacks
Changes made: Educate employees on the growing threat of “spear fishing” attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trinity-heating-20160412.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2016
Raw hash: d4ab60ab31717f5933acd1f6b450e73439e73e795948380d762b638f52901685

Reporting entityArcher & Greiner, A Professional Corporation

Victim entityTrinity Solar

Incidentdiscovered Mar 11, 2016

Stated responseNotified local law enforcement in Wall Township, New Jersey

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov