Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Safety Net Works Inc.

bd_04ef4dace09ddd56 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 28, 2025

Filed

Oct 3, 2025

To disclose

35 weeks

Affected

15state residents only

Linked

4 filings

Confidence

67%

Full breach record for Safety Net Works Inc. →

MVD Express OS LLC notified Montana residents of a data breach discovered on January 28, 2025, where threat actors accessed an employee email account via phishing. Personal information including names, addresses, SSNs, and driver's license data was potentially exposed. The company implemented MFA, updated training, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 35 weeks / 248 days

Jan 28, 2025

Discovered

Oct 3, 2025

Filed

vs. sector median

+28 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_0534992e6a5313f02025-10-03Verified
Maine State AGbd_78341dff347728202025-10-02 · +1dVerified
Indiana State AGbd_3032c11dd02a51382025-09-30 · +3dCandidate

Name: Safety Net Works Inc.
norm: safety net works

Name: Safety Net Works Inc.
norm: safety net works
Also named: Safety Net Works Inc.dba oflegal entity
MVD Express OS LLCdba oftrade name
Industry: Retail & Consumerllm

Discovered: Jan 28, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Implemented more robust technology controls
Added a notice to emails coming from official partner companies
Updated employee training
Added branding to login page
Developed custom scripts for verifying access message IDs
Created tenant wide retention policies
Restricted use of emails for transmission of personal information
Use secure transfer protocols for handling personal information
Implemented multifactor authentication
Changing passwords
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services
Providing proactive fraud assistance
Changes made: Implemented multifactor authentication to better protect account access
Updated employee training
Implemented more robust technology controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(248 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 30 · first

Maine State AG+2d

New Hampshire State AG+3d

Montana State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/10/Consumer-notification-letter-13.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 3, 2025
Raw hash: da3ac7a7d91e2f4aa7e33b4722714d89da1b599c92b3b8f61ec70a119fd23319

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySafety Net Works Inc.

Victim entitySafety Net Works Inc.

Incidentdiscovered Jan 28, 2025

Stated responseImplemented more robust technology controls

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov