MalwareTechnologyInformationRansomwareStolen CredentialsContiData ExfiltratedData EncryptedRansom DemandedEmployee Data InvolvedTargetedIdentity (basic)Government IDEmploymentHealth (basic)FinancialPIIMediumContained

SAC Wireless, LLC

bd_0871517e517fa88b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 16, 2021

Filed

Aug 20, 2021

To disclose

9 weeks

Affected

13state residents only

Linked

8 filings

Confidence

66%

Full breach record for SAC Wireless, LLC →

SAC Wireless notified Montana residents of a ransomware attack by the Conti threat actor on June 16, 2021. The incident involved unauthorized access, data exfiltration to cloud storage, and file encryption. Affected data included employee PII, government IDs, SSNs, and health information. SAC Wireless engaged the FBI, forensic experts, and offered 24 months of Experian identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 65 days

Jun 16, 2021

Begins

Jun 16, 2021

Discovered

Aug 20, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_4bf80acafee5c6912021-06-16 · +65dVerified by operator

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_606f1c5039b8e3922021-08-20Verified
New Hampshire State AGContibd_0a283fc75fc503242021-08-19 · +1dVerified
Maine State AGbd_c93452cb855995bc2021-08-23 · +3dVerified
California State AGContibd_b08fbdce8af290bb2021-08-26 · +6dVerified

Show 2 more filings ↓up to 231d gap

Massachusetts State AGbd_6b390cbb764567602021-09-02 · +13dVerified
Illinois State AGbd_81f21aabf85453042021-01-01 · +231dCandidate

Name: SAC Wireless, LLC
norm: sac wireless
Domain: sacw.com

Name: SAC Wireless, LLC
norm: sac wireless
Domain: sacw.com
Industry: Technologyllm

Discovered: Jun 16, 2021
Breach occurred: Jun 16, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 1, 2021
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDEmploymentHealth (basic)FinancialPII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware· Conti
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1190 Exploit Public-Facing Application
Threat actor: ContiExternalFinancial
Regulator citations: contacted the FBI
Initial access: exploit_public_facing

During the incident: Deployed multiple security tools and infrastructure enhancements to contain the incident
Contacted the FBI
Engaged external counsel and cyber security experts
Changed firewall rules
Disconnected VPN connections
Activated conditional access geo-location policies to limit non-U.S. access
Provided additional employee training
Deployed additional network and endpoint monitoring tools
Expanded multi-factor authentication
Deployed additional threat-hunting and endpoint detection and response tools
Changes made: Deployed additional new measures in the coming months
Assess and monitor new threats and security vulnerabilities on an ongoing basis
Engaged Experian to offer you a free 24-month membership to their identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

New Hampshire State AG+230d

Indiana State AG+231d

Montana State AG+231d · this page

Maine State AG+234d

California State AG+237d

Massachusetts State AG+244d

Pattern: first filing Jan 1 (IL), last Sep 2 (MA) — a 244-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-63.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2021
Raw hash: 57ab10802a5ada36c1d99d4c75263ff48e0c150f3a94ab20e290539baf0cf2d9

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entitySAC Wireless, LLC

Victim entitySAC Wireless, LLC

Incidentdiscovered Jun 16, 2021

Stated responseDeployed multiple security tools and infrastructure enhancements to contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov