HackingOtherStolen CredentialsData ExfiltratedTargetedIdentity (basic)Financial accountFinancial credentialsLowContained

The National WWII Museum

bd_f37791266631fe22 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 10, 2019

Filed

Jun 25, 2019

To disclose

11 weeks

Affected

19state residents only

Linked

3 filings

Confidence

66%

Full breach record for The National WWII Museum →4 incidents on file

The National WWII Museum experienced a cyber-attack affecting customer credit/debit card data (name, address, card number, expiration, CVV) from Oct 6, 2018 to Jan 24, 2019. Suspicious activity detected April 10, 2019. 19 NH residents notified June 21, 2019. Forensic investigators engaged; additional safeguards implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 186 days

discovery → filing · 11 weeks / 76 days

Oct 6, 2018

Begins

Apr 10, 2019

Discovered

Jun 25, 2019

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_1b20ce0b8f1e307d2019-06-24 · +1dVerified
Montana State AGbd_7937222db32ee4a92019-06-21 · +4dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: The National WWII Museum
norm: the national wwii museum
Industry: Otherllm

Discovered: Apr 10, 2019
Breach occurred: Oct 6, 2018 – Jan 24, 2019
Undetected for: 186 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 21, 2019
Affected individuals: 19state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney Generalproviding written notice of this incident to other state regulators
Initial access: exploit_public_facing

During the incident: Began working with third-party forensic investigators
Implemented additional procedures to further protect the security of customer debit and credit cards
Moved quickly to investigate and respond to the incident
Assess the security of WWII systems
Notify potentially affected individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one's credit file
Providing written notice of this incident to other state regulators
Changes made: Working to implement additional safeguards and training to its employees
Review our existing policies and procedures and to implement additional safeguards to further secure payment information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJun 21 · first

Massachusetts State AG+3d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/national-wwii-museum-20190625.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 25, 2019
Raw hash: ff8ac2d10f2134ac7e402bedb26061173a79f71cb597f26c8d66633314181431

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityThe National WWII Museum

Incidentdiscovered Apr 10, 2019

Stated responseBegan working with third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov