HackingProfessional ServicesProfessional ServicesDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Marker Group, Inc.

bd_eca708da06ae323c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 3, 2021

Filed

Apr 18, 2022

To disclose

32 weeks

Affected

263state residents only

Linked

12 filings

Confidence

67%

Full breach record for Marker Group, Inc. →

Supplemental notice from Marker Group, Inc. regarding a data security event affecting New Hampshire residents. Marker discovered suspicious activity on September 3, 2021, leading to the determination that unauthorized third-party access occurred. The incident exposed names, DOBs, SSNs, and medical records. 263 additional NH residents were notified on April 12, 2022. Marker provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 227 days

Sep 3, 2021

Discovered

Apr 18, 2022

Filed

vs. sector median

+14 wks slower

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_29259ef9d63a013c2022-03-14 · +35dVerified
South Carolina State AGbd_510c4941c72aecbb2022-03-14 · +35dVerified
Washington State AGbd_94028bba389de0a02022-03-14 · +35dVerified
New Hampshire State AGbd_a744ac0b943b8a352022-01-04 · +104dVerified

Show 6 more filings ↓up to 109d gap

Illinois State AGbd_3143ae1f2e5576522022-01-01 · +107dVerified
Illinois State AGbd_4c1b8883bbd09cea2022-01-01 · +107dVerified
Maine State AGbd_0b9042c305fcc9d52021-12-30 · +109dCandidate
California State AGbd_52356dbcd46332642021-12-30 · +109dVerified
Indiana State AGbd_7056145a4261d3052021-12-30 · +109dVerified
Montana State AGbd_716781090f874bbe2021-12-30 · +109dVerified

Showing first 10 of 11 linked disclosures.

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Marker Group, Inc.
norm: marker group
Industry: Professional Servicesllm

Discovered: Sep 3, 2021
Materiality determined: —
Notification sent: Apr 12, 2022
Affected individuals: 263state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: reporting this matter to regulators as required

During the incident: Worked to secure its environment
Launched an investigation to determine the nature and scope of the activity
Began a lengthy and time-intensive, thorough review of the potentially impacted folders and its internal files and systems
Notified all currently-identified individuals
Arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueldentity) for 12 months provided by TransUnion Interactive
Reviewing our existing security policies and have implemented additional measures to further protect against similar incidents moving forward
Changes made: Reviewing our existing security policies and have implemented additional measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(227 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Maine State AGDec 30 · first

California State AGDec 30 · first

Indiana State AGDec 30 · first

Montana State AGDec 30 · first

Illinois State AG+2d

New Hampshire State AG+5d

Oregon State AG+74d

South Carolina State AG+74d

Washington State AG+74d

New Hampshire State AG+109d · this page

Pattern: first filing Dec 30 (ME), last Apr 18 (NH) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/marker-20220418.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 18, 2022
Raw hash: 1b064e48a29e61e98567207a6f0447fc92bd82442672a83030fa789dfdc676fa

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityMarker Group, Inc.

Incidentdiscovered Sep 3, 2021

Stated responseWorked to secure its environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov