HackingOtherStolen CredentialsCustomer Data InvolvedTargetedGovernment IDPIIMediumContained

EMJ Corporation

bd_05b53a4f62406132 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 5, 2021

Filed

Sep 27, 2021

To disclose

22 days

Affected

6state residents only

Linked

5 filings

Confidence

66%

Full breach record for EMJ Corporation →

EMJ Corporation notified Montana residents of a September 5, 2021 data incident involving unauthorized access to personal information, including W-2 forms and Social Security numbers. The company engaged cybersecurity experts, cooperated with the FBI, and offered credit monitoring services to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 days

Sep 5, 2021

Begins

Sep 5, 2021

Discovered

Sep 27, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_3729054ba90bb8ad2021-09-27Verified
New Hampshire State AGbd_470f4acbb01172842021-10-08 · +11dVerified
Massachusetts State AGbd_52b2aa8f12bb17572021-10-08 · +11dVerified
Maine State AGbd_f490187b08b5db962021-10-08 · +11dVerified

Name: EMJ Corporation
norm: emj

Name: EMJ Corporation
norm: emj
Industry: Otherllm

Discovered: Sep 5, 2021
Breach occurred: Sep 5, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6state-resident count only
Data types: Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Working with the FBI
Initial access: valid_credentials

During the incident: Engaged cybersecurity experts to assist with the process
Working with the FBI and will provide whatever cooperation is necessary to hold the perpetrators accountable
Enhancing the security of our network to reduce the risk of a similar incident occurring in the future
Providing former and current employees information about how to protect personal information
Offering former and current employees free credit monitoring and identity theft restoration services through TransUnion Interactive
Changes made: Enhancing the security of our network to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGSep 27 · first

Montana State AGSep 27 · first · this page

New Hampshire State AG+11d

Massachusetts State AG+11d

Maine State AG+11d

Pattern: first filing Sep 27 (IN), last Oct 8 (ME) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notificatoin-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2021
Raw hash: 18448e91dfa737ec9cc142eeaf3de8edd912c458a9687cb6be7f5f31ddf53e74

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEMJ Corporation

Victim entityEMJ Corporation

Incidentdiscovered Sep 5, 2021

Stated responseEngaged cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov