HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

Safer Foundation

bd_e14d7bd1cfbbe232 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 6, 2021

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Safer Foundation →

Safer Foundation notified the NH AG of unauthorized access to two employee email accounts between July 24 and August 31, 2020. One NH resident's name and SSN were accessible. Safer Foundation reset passwords, enhanced training, and offered 1 year of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 24, 2020

Begins

Jul 6, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8fb21b8818b6753f2021-06-30 · +6dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Safer Foundation
norm: safer foundation
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jul 24, 2020 – Aug 31, 2020
Materiality determined: —
Notification sent: Jun 30, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation to determine the nature and scope of the incident
Reviewed email system for evidence of suspicious activity
Conducted a thorough review of the potentially at-risk contents of the accounts
Resetting the affected employees’ email account passwords
Providing enhanced training to employees regarding data privacy and information security best practices
Reviewing its existing policies and procedures to mitigate any risks associated with this event
Providing potentially affected individuals access to complimentary credit monitoring services for one (1) year through Kroll
Changes made: Enhancing the security of its systems
Providing enhanced training to employees regarding data privacy and information security best practices
Reviewing its existing policies and procedures to mitigate any risks associated with this event and to better prevent future events
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 30 · first

New Hampshire State AG+6d · this page

Pattern: first filing Jun 30 (MA), last Jul 6 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/safer-foundation-20210706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2021
Raw hash: 1639f36e026a324d42ff4283bf8625bd24f5f54b9617bd7d0028b3e19fef41ce

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySafer Foundation

IncidentUnauthorized Access

Stated responseLaunched an investigation to determine the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov