HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Agincourt Wallboard, LLC

bd_f5e1d9fc6a6a3e6b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 17, 2013

Filed

Feb 11, 2013

To disclose

25 days

Affected · nationwide

6236 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Agincourt Wallboard, LLC →

Wallboard Supply Company (Agincourt Wallboard, LLC) notified the NH AG of a breach where an unauthorized party used administrator credentials to access its payroll system. The incident, discovered Jan 17, 2013, exposed PII, SSNs, and bank routing info for 62 employees. The attacker altered bank details for 10 employees but funds were not transferred. Remediation included credential resets, enhanced payroll security, malware removal, and credit monitoring offers.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 days

Jan 17, 2013

Discovered

Feb 11, 2013

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_53ac7984b5dc70812013-02-13 · +2dVerified

Name: McLane, Graf, Raulerson & Middleton Professional Association
norm: mclane graf raulerson middleton professional

Name: Agincourt Wallboard, LLC
norm: agincourt wallboard
Also named: Agincourt Wallboard, LLCdba oflegal entity
Wallboard Supply Companydba oftrade name
Industry: Retail & Consumerllm

Discovered: Jan 17, 2013
Materiality determined: —
Notification sent: Jan 19, 2013
Affected individuals: 62state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation into the matter
Notified and filed a report with law enforcement
Gave notice to its employees orally and by email
Changed the administrator’s credentials
Engaged computer forensic experts
Changes made: The payroll vendor installed new software that will enable it to better track unauthorized activities
Created additional layers of security in the payroll system
Requests to alter bank account information will trigger an automatic authorization and approval process
If more than two changes are made from an administrator’s account, a supplementary authorization and approval process will be required
Removed the malware
Installed new firewall protections
Installed new anti-virus software
Installed additional anti-malware software
Offering a complimentary one-year membership of Experian’s ProtectMyIDTM Elite
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGFeb 11 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wallboard-supply-20130211.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2013
Raw hash: 189cbe334e524b57e49617c3aac4059871791fbf2f558d5ec28ffabd6453c480

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMcLane, Graf, Raulerson & Middleton Professional Association

Victim entityAgincourt Wallboard, LLC

Incidentdiscovered Jan 17, 2013

Stated responseLaunched an investigation into the matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov