HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Politi & Magnifico, LLC

bd_e0b0b5d59e7d96d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 13, 2016

Filed

Nov 10, 2016

To disclose

8 weeks

Affected

4state residents only

Linked

3 filings

Confidence

67%

Full breach record for Politi & Magnifico, LLC →

Politi & Magnifico, LLC notified NH AG of a breach where an unknown third party filed tax returns using client data. Discovered Sept 13, 2016. 4 NH residents affected. Data included names, SSNs, DOBs, and financial info. Remediation included forensic investigation, staff retraining, and security controls.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Sep 13, 2016

Discovered

Nov 10, 2016

Filed

vs. sector median

10 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_49b83418a98191bf2016-11-09 · +1dCandidate
Massachusetts State AGbd_530fc544b77a287e2016-11-09 · +1dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Politi & Magnifico, LLC
norm: politi magnifico
Industry: Professional Servicesllm

Discovered: Sep 13, 2016
Materiality determined: —
Notification sent: Nov 9, 2016
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: working with the IRS
Initial access: valid_credentials

During the incident: Conducted a forensic investigation
Contacted law enforcement
Sent letters notifying affected individuals
Offered 24 months of credit monitoring and identity theft protection services
Changes made: Re-training staff on data security threats
Reviewing and updating policies and procedures
Implementing additional security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 9 · first

Massachusetts State AGNov 9 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/politi-magnifico-20161110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2016
Raw hash: ed09c81c0f1cbe913c79d8681fcb05a0815be9589bdc685990a76f012cbf7eae

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityPoliti & Magnifico, LLC

Incidentdiscovered Sep 13, 2016

Stated responseConducted a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov