HackingProfessional ServicesProfessional ServicesTargetedIdentity (basic)Government IDHighContained

Strategic Benefits Advisors, Inc.

bd_eea9a1cc29958d4e · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 19, 2021

Filed

Nov 8, 2021

To disclose

7 weeks

Affected

1,732state residents only

Linked

8 filings

Confidence

65%

Full breach record for Strategic Benefits Advisors, Inc. →2 incidents on file

Strategic Benefits Advisors, Inc. notified South Carolina AG of a cyberattack discovered on September 19, 2021. A limited number of files containing names and SSNs were accessed. SBA engaged law enforcement, secured systems, and offered 24 months of credit monitoring. No specific count of affected individuals was disclosed.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 50 days

Sep 19, 2021

Discovered

Nov 8, 2021

Filed

vs. sector median

11 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

California State AGbd_18a8bd76f672839b2021-11-05 · +3dCandidate
Montana State AGbd_757fc0172a308c292021-11-12 · +4dVerified
Maine State AGbd_ec306f1e59a5016e2021-11-12 · +4dVerified
New Hampshire State AGbd_b78dcbba40f9449f2021-11-01 · +7dVerified

Show 3 more filings ↓up to 20d gap

Massachusetts State AGbd_9fcc52b918a8d9a42021-10-28 · +11dVerified
Maine State AGbd_ee70dc26578ff3cb2021-10-28 · +11dVerified
Indiana State AGbd_c0f1e7ae47b4c21b2021-10-19 · +20dVerified

Name: Strategic Benefits Advisors, Inc.
norm: strategic benefits advisors

Name: Strategic Benefits Advisors, Inc.
norm: strategic benefits advisors
Industry: Professional Servicesllm

Discovered: Sep 19, 2021
Materiality determined: —
Notification sent: Nov 5, 2021
Affected individuals: 1,732state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported this incident to law enforcement

During the incident: Promptly took steps to secure our systems
Commenced an investigation into the nature and scope of the incident
Reported this incident to law enforcement and will cooperate with any criminal investigation
Providing identity theft and credit monitoring protection services for 24 months through Experian
Changes made: Commenced a review of existing security policies
Implementing additional measures and enhanced security tools
Implementing additional safe guards
Providing additional training to our employees on data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Indiana State AGOct 19 · first

Massachusetts State AG+9d

Maine State AG+9d

New Hampshire State AG+13d

California State AG+17d

South Carolina State AG+20d · this page

Montana State AG+24d

Maine State AG+24d

Pattern: first filing Oct 19 (IN), last Nov 12 (ME) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/StrategicBenefitsAdvisors.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 8, 2021
Raw hash: fc40d3319f7b53d8e3d3e1ce18541fc75e51f4f2f4f920f352cf4394dc6f03bb

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityStrategic Benefits Advisors, Inc.

Victim entityStrategic Benefits Advisors, Inc.

Incidentdiscovered Sep 19, 2021

Stated responsePromptly took steps to secure our systems

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov