HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedIdentity (basic)Government IDMediumContained

MCKISSOCK INVESTMENT HOLDINGS, LLC

bd_0a625461f49a5251 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 26, 2020

Filed

May 1, 2020

To disclose

5 weeks

Affected

2state residents only

Linked

4 filings

Confidence

64%

Full breach record for MCKISSOCK INVESTMENT HOLDINGS, LLC →

McKissock Investment Holdings, LLC notified affected individuals of unauthorized access to a legacy virtual server between Nov 16, 2019 and Mar 4, 2020. Personal information including names and driver's license numbers was potentially exposed. The company engaged forensic investigators, disabled the server, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 131 days

discovery → filing · 5 weeks / 36 days

Nov 16, 2019

Begins

Mar 26, 2020

Discovered

May 1, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_0f50b9b3de1e72542020-05-01Verified
California State AGbd_6921e3ca4019aca42020-05-01Verified
Massachusetts State AGbd_d2ec6fcf963deed22020-05-01Verified

Name: MCKISSOCK INVESTMENT HOLDINGS, LLC
norm: mckissock investment

Name: MCKISSOCK INVESTMENT HOLDINGS, LLC
norm: mckissock investment
Industry: Financial Servicesllm

Discovered: Mar 26, 2020
Breach occurred: Nov 16, 2019 – Mar 4, 2020
Undetected for: 131 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 1, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Began an investigation with the assistance of third-party forensic investigators
Disabled access to the affected server
Implemented increased security measures
Conducted additional employee training
Reviewing our policies and procedures relating to data security
Secured the services of NortonLifeLock, Inc. to provide identity and credit monitoring services
Changes made: Implemented increased security measures
Conducted additional employee training
Reviewing our policies and procedures relating to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 1 · first

California State AGMay 1 · first

Massachusetts State AGMay 1 · first

Montana State AGMay 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-80.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 1, 2020
Raw hash: 4dd21a00a390b6989d02108d9c95954c4d0e007070e2229a3ae5c9e0df2b4d2a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMCKISSOCK INVESTMENT HOLDINGS, LLC

Victim entityMCKISSOCK INVESTMENT HOLDINGS, LLC

Incidentdiscovered Mar 26, 2020

Stated responseBegan an investigation with the assistance of third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov