COR Clearing LLC (COR)

COR Clearing LLC notified individuals of a security incident where unauthorized logins to employee email accounts occurred. A bad actor used an employee account to send phishing emails. Personal information including SSNs, driver's license numbers, and financial account info may have been present in the accessed emails. No evidence of actual access or misuse was found. FBI was notified, and affected individuals were offered two years of Experian IdentityWorks.

COR Clearing LLC reported a security incident to the New Hampshire Attorney General on December 11, 2018. On September 7, 2018, the company discovered unauthorized access to employee email accounts after a bad actor used an employee's credentials to send phishing emails. The investigation identified one New Hampshire resident whose personal information (SSN, Driver's License, financial account info) was in an email attachment. No evidence of actual data access was found, but notifications were sent out of caution. The FBI, FINRA, and NY DFS were notified. The company engaged forensic investigators and offered credit monitoring.