Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedTargetedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

ABC Phones of North Carolina, Inc.

bd_ea867956a3303efe · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 1, 2018

Filed

Apr 13, 2018

To disclose

10 weeks

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for ABC Phones of North Carolina, Inc. →2 incidents on file

ABC Phones of North Carolina, Inc. dba Victra notified the NH AG of a phishing incident in Feb 2018 compromising HR employee SharePoint environments. 3 NH residents affected. Data potentially included PII, SSN, DOB, gov ID, and financial info. Remediation included encryption, training, and policy updates. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 31 days

discovery → filing · 10 weeks / 71 days

Jan 1, 2018

Begins

Feb 1, 2018

Discovered

Apr 13, 2018

Filed

vs. sector median

+3 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9ec16fdf62d315b02018-04-13Verified

Name: ABC Phones of North Carolina, Inc.
norm: abc phones of north carolina
Domain: victra.com

Name: ABC Phones of North Carolina, Inc.
norm: abc phones of north carolina
Domain: victra.com
Also named: ABC Phones of North Carolina, Inc.dba oflegal entity
Victradba oftrade name
Industry: Retail & Consumerllm

Discovered: Feb 1, 2018
Breach occurred: Jan 1, 2018
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 17, 2018
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Consumer Protection and Antitrust Bureau
Initial access: phishing_link

During the incident: Engaged outside counsel
Engaged an experienced cybersecurity vendor to conduct a forensic audit
Offering the Residents a year-long credit monitoring program
Changes made: Increasing encryption processes
Updating policies and procedures of intercompany handling of personal information
Increasing IT security awareness trainings
Implementing stronger group policies to prevent software being installed on computers
Locking certain hard drives from being able to save data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 13 · first

New Hampshire State AGApr 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/abc-phones-20180413.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 13, 2018
Raw hash: d89abdf94c22eaa10820cbe3f4af790549be199ba2c57fe5a0a859643fde42ad

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityABC Phones of North Carolina, Inc.

Victim entityABC Phones of North Carolina, Inc.

Incidentdiscovered Feb 1, 2018

Stated responseEngaged outside counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov