HackingFinancial ServicesFinanceStolen CredentialsTargetedPIIIdentity (basic)LowContained

Evarts Termaine Flicker Co.

bd_0909eecd4c081d5b · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 15, 2020

Filed

Dec 23, 2020

To disclose

36 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Evarts Termaine Flicker Co. →2 incidents on file

Evarts Tremaine Flicker Co. notified Montana residents of a data security incident where an employee email account was accessed without authorization between March 1 and April 15, 2020. The company detected unusual activity on April 15, 2020, engaged forensic investigators, and reported the incident to the FBI. Personal information was potentially exposed, and the company offered one year of complimentary identity monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 45 days

discovery → filing · 36 weeks / 252 days

Mar 1, 2020

Begins

Apr 15, 2020

Discovered

Dec 23, 2020

Filed

vs. sector median

+28 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Evarts Termaine Flicker Co.
norm: evarts termaine flicker

Name: Evarts Termaine Flicker Co.
norm: evarts termaine flicker
Industry: Financial Servicesllm

Discovered: Apr 15, 2020
Breach occurred: Mar 1, 2020 – Apr 15, 2020
Undetected for: 45 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this matter to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged a leading, independent forensics firm to determine what happened
Took steps to secure the account
Launched an investigation
Reported this matter to the Federal Bureau of Investigation
Offering complimentary identity monitoring services through Kroll
Changes made: Applied enhanced security measures to our email system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 36 weeks(252 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Evarts-Tremaine-Sample-Consumer-Notice-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2020
Raw hash: 9c344a2a2627876ad84dadafc3f478d828bb5b30158216dfa0d24215946171b9

Reporting entityEvarts Termaine Flicker Co.

Victim entityEvarts Termaine Flicker Co.

Incidentdiscovered Apr 15, 2020

Stated responseEngaged a leading, independent forensics firm to determine what happened

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov