HackingStolen CredentialsRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Major League Baseball Players Benefit Plan
bd_e72714fa9fdc5862 · schema v1 · pii pii-v1
Full breach record for Major League Baseball Players Benefit Plan →Major League Baseball Players Benefit Plan notified NH AG of a breach at vendor Horizon Actuarial Services. Unauthorized access occurred Nov 10-11, 2021. Stolen data included names, SSNs, DOBs, and financial account info. 39 NH residents affected. Ransom was paid to threat actor. Notifications sent March 22, 2022.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_512b2d6d8f582fd4Montana State AGfiled 2022-03-22Candidate
- bd_b28aa9b98c31a66cCalifornia State AGfiled 2022-03-22Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/major-league-baseball-players-benefit-plan-20220322.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2022
- Raw hash
- 458c2011628710f7bdd3a2d02969a93b88b3e5d259739aa03bdeae722c81c3b8
Reporting entity
- Name
- Major League Baseball Players Benefit Plannorm: major league baseball players benefit plan
Victim entity
- Name
- Major League Baseball Players Benefit Plannorm: major league baseball players benefit plan
Incident
- Discovered
- Jan 13, 2022
- Materiality determined
- —
- Notification sent
- Mar 22, 2022
- Affected individuals
- 39
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBINotified New Hampshire Attorney General
- Third party
- via Horizon Actuarial Services, LLCvendor
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.