HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

The Beacon Insurance Company Limited

bd_f094af34f62dc5bc · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 3, 2023

Filed

Nov 27, 2023

To disclose

42 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for The Beacon Insurance Company Limited →2 incidents on file

Beacon Insurance Services notified affected individuals of an unauthorized access to an employee email account occurring between Jan 31 and Feb 3, 2023. The incident was discovered on Feb 3, 2023. The breach exposed names and other personal information. Beacon engaged third-party cybersecurity specialists, secured the account, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d42 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 42 weeks / 297 days

Jan 31, 2023

Begins

Feb 3, 2023

Discovered

Nov 27, 2023

Filed

vs. sector median

+34 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

A leak claim by dataleak about this victim predates this filing by 360 days.View originating leak claim

Name: The Beacon Insurance Company Limited
norm: the beacon insurance

Name: The Beacon Insurance Company Limited
norm: the beacon insurance
Industry: Financial Servicesllm

Discovered: Feb 3, 2023
Breach occurred: Jan 31, 2023 – Feb 3, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 27, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notifying relevant regulators
Initial access: valid_credentials

During the incident: Secured the employee’s email account
Launched an investigation, with the assistance of third-party cybersecurity specialists
Reviewing existing security policies and implementing additional cybersecurity measures
Revamping its employee training program
Notifying individuals and relevant regulators
Offering immediate access to credit monitoring and identity theft protection services
Changes made: Reviewing existing security policies and implementing additional cybersecurity measures
Revamping its employee training program
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(297 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/beacon-insurance-services-20231127.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 27, 2023
Raw hash: 7bf8240eff4cbe97e9e12e7ddeb0aeeee267250bb6f229da40ed9d9f669afe15

Reporting entityThe Beacon Insurance Company Limited

Victim entityThe Beacon Insurance Company Limited

Incidentdiscovered Feb 3, 2023

Stated responseSecured the employee’s email account

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov