Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

YHB Investment Advisors, Inc.

bd_ede7ab39ecf9bff1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 12, 2024

Filed

Jul 30, 2024

To disclose

7 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for YHB Investment Advisors, Inc. →

YHB Investment Advisors, Inc. reported a cybersecurity incident discovered on June 12, 2024, involving suspicious activity in its email environment. The breach likely compromised sensitive personal information of 2 New Hampshire residents. YHB engaged forensic investigators, reset passwords, and offered credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 48 days

Jun 12, 2024

Discovered

Jul 25, 2024

Scope determined

Jul 30, 2024

Filed

vs. sector median

1 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_0dde0a55f616f3352024-07-30Verified

Name: YHB Investment Advisors, Inc.
norm: yhb investment advisors

Name: YHB Investment Advisors, Inc.
norm: yhb investment advisors
Industry: Financial Servicesllm

Discovered: Jun 12, 2024
Materiality determined: Jul 25, 2024
Notification sent: Jul 30, 2024
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Reset passwords for all accounts
Offered complimentary credit monitoring and identity theft restoration services
Changes made: Updated policies and procedures, including the security risk management plan
Improved physical security
Implemented new technical safeguards
Enhanced data security measures
Trained workforce members
Implemented periodic technical and nontechnical evaluations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 30 · first

New Hampshire State AGJul 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/yhb-investment-advisors-20240730.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2024
Raw hash: 547d28dcf2ecd8491f9583d8bfeef3ad46410fa949ba515838fe31f179231ce8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityYHB Investment Advisors, Inc.

Victim entityYHB Investment Advisors, Inc.

Incidentdiscovered Jun 12, 2024

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov