HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)LowContained

Promontory Investments LLC

bd_fd871fc6fe003ae6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 11, 2024

Filed

Jan 17, 2025

To disclose

10 weeks

Affected

2state residents only

Linked

6 filings

Confidence

65%

Full breach record for Promontory Investments LLC →

Promontory Investments LLC d/b/a Promontory Club reported that an unauthorized third party accessed its computer network between November 11 and November 13, 2024. The incident was discovered on November 11, 2024. Investigation determined that personal information (names, dates of birth, and contact information) of two New Hampshire residents was accessed. The company contained the incident, engaged forensic investigators, and notified affected individuals on January 14, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 67 days

Nov 11, 2024

Begins

Nov 11, 2024

Discovered

Jan 17, 2025

Filed

vs. sector median

+1 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_bc0784d8ba891f312025-01-17Verified
Maine State AGbd_fa00472beb09de252025-01-17Verified
Nebraska State AGbd_48a6c44f2221fcda2025-01-14 · +3dCandidate
Indiana State AGbd_861fbc9cc10f27402025-01-14 · +3dVerified

Show 1 more filing ↓up to 300d gap

Maryland State AGbd_3b5e87d5e5788bef2025-11-13 · +300dVerified

Name: Promontory Investments LLC
norm: promontory investments

Name: Promontory Investments LLC
norm: promontory investments
Also named: Promontory Investments LLCdba oflegal entity
Promontory Clubdba oftrade name
Industry: Financial Servicesllm

Discovered: Nov 11, 2024
Breach occurred: Nov 11, 2024 – Nov 13, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 14, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Attorney General of the State of New Hampshire

During the incident: Contained the issue
Began an internal investigation
Engaged a third-party forensic firm to further investigate the incident and confirm the security of its systems
Reviewed the contents of those files to determine if they contained any personal information
Mailed notification letters to New Hampshire residents
Changes made: Enhancing our technical security measures
Offering a complimentary one-year membership of Experian IdentityWorks SM Credit 3B
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGJan 14 · first

Indiana State AGJan 14 · first

Massachusetts State AG+3d

Maine State AG+3d

New Hampshire State AG+3d · this page

Maryland State AG+303d

Pattern: first filing Jan 14 (NE), last Nov 13 (MD) — a 303-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/promontory-investments-club-20250117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 17, 2025
Raw hash: ad5ccc9250227f4d9880809e1a3fc1411ab9bd8b36b7f3c20e0da20d448725ab

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPromontory Investments LLC

Victim entityPromontory Investments LLC

Incidentdiscovered Nov 11, 2024

Stated responseContained the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov