Social EngineeringTechnologyInformationPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Financial accountLowActive

Data Intensity

bd_eb1f7797b64b9c4d · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 22, 2018

Filed

Oct 1, 2018

To disclose

6 weeks

Affected

5state residents only

Confidence

66%

Full breach record for Data Intensity →2 incidents on file

Data Intensity, a managed services provider, notified the NH AG of a phishing incident where an Assistant Controller's credentials were compromised. Unauthorized access occurred from July 9 to August 22, 2018, allowing email forwarding. Data exposed included names, addresses, and bank/routing info of 5 NH employees/contractors. Mandiant was engaged for investigation.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 44 days

discovery → filing · 6 weeks / 40 days

Jul 9, 2018

Begins

Aug 22, 2018

Discovered

Oct 1, 2018

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident

Name: Data Intensity
norm: data intensity

Name: Data Intensity
norm: data intensity
Industry: Technologyllm

Discovered: Aug 22, 2018
Breach occurred: Jul 9, 2018 – Aug 22, 2018
Undetected for: 44 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 5state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged Mandiant to further investigate the incident
Retained KL Discovery to conduct an analysis of the nature of the data potentially accessed
Changed the password on the potentially compromised account
Disabled the forwarding of emails from the Assistant Controller's mailbox
Disabled all automatic email forwarding capability enterprise wide
Changes made: Provided affected individuals with access to credit monitoring services for a period of twenty-four months at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/data-intensity-20181001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2018
Raw hash: 1fdd958a40879f03bae46d016cef65d32d25deaf1af8eb7e7c19a6ba198e90a1

Reporting entityData Intensity

Victim entityData Intensity

Incidentdiscovered Aug 22, 2018

Stated responseEngaged Mandiant to further investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov