HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Brenton Point Wealth Advisors

bd_ffdb784bc2e21928 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 20, 2018

Filed

Oct 18, 2018

To disclose

8 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Brenton Point Wealth Advisors →

Brenton Point Wealth Advisors (BPWA) notified the NH Attorney General of a data security incident affecting one NH resident. Unauthorized access to an employee's email account occurred from August 2-20, 2018, via stolen credentials. The resident's name and SSN were exposed. BPWA engaged forensic investigators, reset credentials, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 18 days

discovery → filing · 8 weeks / 59 days

Aug 2, 2018

Begins

Aug 20, 2018

Discovered

Oct 18, 2018

Filed

vs. sector median

on median

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_76577120c43c47962018-10-12 · +6dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Brenton Point Wealth Advisors
norm: brenton point wealth advisors
Industry: Financial Servicesllm

Discovered: Aug 20, 2018
Breach occurred: Aug 2, 2018 – Aug 20, 2018
Undetected for: 18 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 12, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the Office of the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Retained a leading forensic investigation firm to assist with BPWA's investigation
Changed the employee's email credentials
Reviewed emails and attachments programmatically and manually to determine what information may have been accessible
Changes made: Implementing additional safeguards to protect the security of information
Reviewing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 12 · first

New Hampshire State AG+6d · this page

Pattern: first filing Oct 12 (MA), last Oct 18 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/brenton-point-wealth-20181018.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 18, 2018
Raw hash: d22745d577c6cdeac10fb3d18a51471ebc9aafb0816bded3caa1495e4e92d065

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityBrenton Point Wealth Advisors

Incidentdiscovered Aug 20, 2018

Stated responseRetained a leading forensic investigation firm to assist with BPWA's investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov