PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

FIRST COMMAND FINANCIAL SERVICES, INC.

bd_f342c811d9f0e57f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 24, 2015

Filed

May 5, 2015

To disclose

10 weeks

Affected

2state residents only

Linked

2 filings

Confidence

68%

Full breach record for FIRST COMMAND FINANCIAL SERVICES, INC. →

First Command Financial Services, Inc. reported the theft of a laptop containing client PII (names, SSNs, account numbers) on Feb 24, 2015. Two NH residents affected. Laptop was password-protected but unencrypted. No evidence of misuse. Police notified, clients alerted, credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 70 days

Feb 24, 2015

Discovered

May 5, 2015

Filed

vs. sector median

+2 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_552bfeba7b5b23942015-05-08 · +3dVerified

Name: FIRST COMMAND FINANCIAL SERVICES, INC.
norm: first command financial

Name: FIRST COMMAND FINANCIAL SERVICES, INC.
norm: first command financial
Industry: Financial Servicesllm

Discovered: Feb 24, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: provided notice of this incident to the New Hampshire Department of Insurance

During the incident: Reported to the police
System password was changed to prevent access to the First Command network or other applications
Clients were notified by letter of the incident
Offered credit monitoring services reimbursement
Provided notice of this incident to the New Hampshire Department of Insurance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(70 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 5 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/first-command-financial-20150506.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 5, 2015
Raw hash: 5f9c1f7a5070eda063c8fbb3ab1b48c5d355623075878bb6cb33f328d73d6433

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFIRST COMMAND FINANCIAL SERVICES, INC.

Victim entityFIRST COMMAND FINANCIAL SERVICES, INC.

Incidentdiscovered Feb 24, 2015

Stated responseReported to the police

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov