Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Qualified Plans, LLC

bd_df8d30f49088ad6f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2018

Filed

Jun 6, 2018

To disclose

21 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Qualified Plans, LLC →

Qualified Plans, LLC reported a phishing attack on Jan 11, 2018, compromising two employee email accounts. The incident potentially exposed names, DOBs, and SSNs of 1 NH resident. Notification was sent June 6, 2018. Remediation included MFA, training, and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 146 days

Jan 11, 2018

Discovered

Jun 6, 2018

Filed

vs. sector median

+12 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_f49cc73fbdb4d4022018-06-06Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Qualified Plans, LLC
norm: qualified plans
Industry: Financial Servicesllm

Discovered: Jan 11, 2018
Materiality determined: —
Notification sent: Jun 6, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notice regarding this incident is also being provided to the three credit reporting agencies
Initial access: phishing_link

During the incident: Conducted an investigation
Engaged a forensics vendor to analyze what information may be at risk
Provided potentially affected individuals with complimentary credit monitoring and identity theft restoration services
Implementing multi-factor authentication
Providing additional training to Qualified Plans staff concerning cyber security risks
Notice regarding this incident is also being provided to the three credit reporting agencies
Changes made: Implementing multi-factor authentication
Providing additional training to Qualified Plans staff concerning cyber security risks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(146 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 6 · first

New Hampshire State AGJun 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/qualified-plans-20180606.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2018
Raw hash: 2006584ffda5da95bc50cbb4414ca0100a64e413fb4f2d64a09f44f6c43e9149

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityQualified Plans, LLC

Incidentdiscovered Jan 11, 2018

Stated responseConducted an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov