Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedPIIIdentity (basic)Government IDPHIHealth (basic)MediumContained

Carpenters Benefit Funds of Philadelphia

bd_0489bab7c1466463 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 17, 2018

Filed

Sep 10, 2018

To disclose

8 weeks

Affected

4state residents only

Confidence

66%

Carpenters Benefit Funds of Philadelphia notified Montana residents of a phishing attack targeting employees between April 23 and May 3, 2018. The incident was discovered on July 17, 2018, after forensic review revealed access to emails containing names, SSNs, and health insurance info. No evidence of misuse was found. The company engaged external cybersecurity professionals and offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 85 days

discovery → filing · 8 weeks / 55 days

Apr 23, 2018

Begins

Jul 17, 2018

Discovered

Sep 10, 2018

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Carpenters Benefit Funds of Philadelphia
norm: carpenters benefit funds of philadelphia
Domain: carpentersfund.org

Name: Carpenters Benefit Funds of Philadelphia
norm: carpenters benefit funds of philadelphia
Domain: carpentersfund.org
Industry: Financial Servicesllm

Discovered: Jul 17, 2018
Breach occurred: Apr 23, 2018 – May 3, 2018
Undetected for: 85 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)Government IDPHIHealth (basic)
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals
Conducted an extensive forensic investigation and manual email review
Offering a complimentary one-year membership of Experian IdentityWorks Credit 3B
Changes made: Made extensive changes to our policies
Continue to evaluate and modify our practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(55 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-Notification-Details-6.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 10, 2018
Raw hash: 9b9431151d43405dd2511ad8c7ec17c49e532fcf0b7205adf40d6b43cf0c0a09

Reporting entityCarpenters Benefit Funds of Philadelphia

Victim entityCarpenters Benefit Funds of Philadelphia

Incidentdiscovered Jul 17, 2018

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov