HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Rockingham Mutual Group

bd_fee30c36b82e2caf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 2, 2020

Filed

Sep 21, 2021

To disclose

51 weeks

Affected

11state residents only

Linked

3 filings

Confidence

66%

Full breach record for Rockingham Mutual Group →2 incidents on file

Rockingham Mutual Group, an insurance company, detected a cybersecurity attack on October 2, 2020, where an unauthorized third party attempted to infiltrate its network. The incident potentially compromised personal information of 11 New Hampshire residents, including names, Social Security numbers, driver's licenses, passports, and health insurance information. No evidence of data misuse was found. The company engaged forensic specialists, collaborated with the FBI, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 51 weeks / 354 days

Oct 2, 2020

Begins

Oct 2, 2020

Discovered

Sep 21, 2021

Filed

vs. sector median

+42 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_eb2ba915603a6b842021-09-17 · +4dCandidate
Maine State AGbd_bf39e63d53a074582022-01-21 · +122dVerified

Name: Rockingham Mutual Group
norm: rockingham mutual group

Name: Rockingham Mutual Group
norm: rockingham mutual
Industry: Financial Servicesllm

Discovered: Oct 2, 2020
Breach occurred: Oct 2, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 17, 2021
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Collaborating with the FBI

During the incident: Conducting an investigation with the assistance of third-party forensic specialists
Confirming the security of any relevant systems
Collaborating with the FBI in response to this incident
Offered free credit monitoring services to all potentially affected individuals
Changes made: Reviewed, altered and enhanced its policies and procedures relating to the security of its e-mail systems and servers
Reviewed and altered policies and procedures relating to the security of our systems and servers, as well as our information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(354 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGSep 17 · first

New Hampshire State AG+4d · this page

Maine State AG+126d

Pattern: first filing Sep 17 (MT), last Jan 21 (ME) — a 126-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rockingham-mutual-group-20210921.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 21, 2021
Raw hash: 67c473f6fe77fa6dad90010ce8e31e7f93b7e09a3856f238d9b6a991016abb6d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityRockingham Mutual Group

Victim entityRockingham Mutual Group

Incidentdiscovered Oct 2, 2020

Stated responseConducting an investigation with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov