Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Trust Company of Illinois (TCI)

bd_067713c90c6169ac · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 27, 2018

Filed

Jun 29, 2018

To disclose

9 weeks

Affected

3state residents only

Confidence

64%

Full breach record for Trust Company of Illinois (TCI) →

Trust Company of Illinois notified Montana regulators of a phishing incident where an employee email account was compromised on April 25, 2018. The attacker accessed participating employee data including names, DOBs, and SSNs. The company disabled the account, reset passwords, engaged forensic investigators, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 9 weeks / 63 days

Apr 25, 2018

Begins

Apr 27, 2018

Discovered

Jun 29, 2018

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Trust Company of Illinois (TCI)
norm: trust company of illinois tci

Name: Trust Company of Illinois (TCI)
norm: trust company of illinois tci
Industry: Financial Servicesllm

Discovered: Apr 27, 2018
Breach occurred: Apr 25, 2018
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 29, 2018
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notifying certain regulators as required
Initial access: phishing_link

During the incident: Disabled the account
Reset all account passwords
Launched an investigation into the nature and scope of the incident
Worked with third-party forensic investigators to confirm the security of the email account and determine whether sensitive information may have been impacted by the incident
Notified certain regulators as required
Changes made: Reinforced existing security protocols to recognize popular phishing schemes and reduce the likelihood of a similar email event from occurring in the future
Offering complimentary credit monitoring services through AllClear ID for 24 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Trust-Co-of-Illinois.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2018
Raw hash: f7c3db4962ea4074bc5b6fbefad326cb6b15d917f606872a82ad437ef1ab1225

Reporting entityTrust Company of Illinois (TCI)

Victim entityTrust Company of Illinois (TCI)

Incidentdiscovered Apr 27, 2018

Stated responseDisabled the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov