HackingTelecom & MediaInformationEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Terrier Media Buyer, Inc.

bd_f42409412491ca28 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 3, 2021

Filed

Oct 18, 2021

To disclose

20 weeks

Affected

21state residents only

Linked

9 filings

Confidence

66%

Full breach record for Terrier Media Buyer, Inc. →

On June 3, 2021, an unauthorized third party gained remote access to Cox Media Group's systems. The actor accessed a server containing HR data, including names, addresses, SSNs, driver's license numbers, and financial account numbers, and attempted to exfiltrate copies. The company contained the incident on the same day. No evidence confirms data was successfully removed. Approximately 21 New Hampshire residents were affected. The company offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Jun 3, 2021

Begins

Jun 3, 2021

Discovered

Oct 18, 2021

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Washington State AGbd_29839e00494e2ecb2021-10-28 · +10dCandidate
Indiana State AGbd_0163e634ffa6f5e22021-10-08 · +10dVerified
California State AGbd_7a462900aa4679d72021-10-08 · +10dVerified
Massachusetts State AGbd_d8f4aa8696c223642021-10-08 · +10dVerified

Show 4 more filings ↓up to 18d gap

Montana State AGbd_dc3b2599ce6b8bf72021-10-08 · +10dVerified
California State AGbd_03ea52157fe9b0612021-11-02 · +15dVerified
Maine State AGbd_9cae2e363ad0316d2021-11-02 · +15dVerified
New Hampshire State AGbd_ecba583908a8f00c2021-11-05 · +18dCandidate

Name: Terrier Media Buyer, Inc.
norm: terrier media buyer

Name: Terrier Media Buyer, Inc.
norm: terrier media buyer
Also named: Terrier Media Buyer, Inc.dba oflegal entity
Cox Media Groupdba oftrade name
Industry: Telecom & Mediallm

Discovered: Jun 3, 2021
Breach occurred: Jun 3, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 8, 2021
Affected individuals: 21state-resident count only
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: reported the incident to the FBI

During the incident: Took steps to terminate the threat actor’s access and prevent further unauthorized access
Began a thorough investigation with the support of leading outside cybersecurity experts
Promptly reported the incident to the FBI
Offered complimentary credit monitoring services to those individuals
Sending notification letters to all individuals whose data the threat actor attempted to acquire
Changes made: Implemented enhanced security controls
Continuing to monitor and improve its capabilities to detect any further threats and avoid any further unauthorized activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGOct 8 · first

California State AGOct 8 · first

Massachusetts State AGOct 8 · first

Montana State AGOct 8 · first

New Hampshire State AG+10d · this page

Washington State AG+20d

California State AG+25d

Maine State AG+25d

New Hampshire State AG+28d

Pattern: first filing Oct 8 (IN), last Nov 5 (NH) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/terrier-media-buyer-dba-cox-media-20211018.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 18, 2021
Raw hash: fd40529fdd41d21cc7a17f26f3eccb54f3e69909512f9e4b8e6f490e5962f2b6

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityTerrier Media Buyer, Inc.

Victim entityTerrier Media Buyer, Inc.

Incidentdiscovered Jun 3, 2021

Stated responseTook steps to terminate the threat actor’s access and prevent further unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov