MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedRansom DemandedIdentity (basic)Government IDHealth (basic)EmploymentMediumContained

Keenan & Associates

bd_0e364e13cc65ddbc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 27, 2023

Filed

Dec 11, 2023

To disclose

15 weeks

Affected

727state residents only

Linked

14 filings

Confidence

65%

Full breach record for Keenan & Associates →4 incidents on file

Keenan & Associates notified Montana residents of a ransomware incident discovered on August 27, 2023. Unauthorized access occurred between August 21-27, 2023, resulting in the exfiltration of personal information including names, SSNs, driver's licenses, passport numbers, health information, and employment data. Keenan engaged forensic experts, contained the incident, and notified law enforcement. Affected individuals were offered 24 months of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 15 weeks / 106 days

Aug 21, 2023

Begins

Aug 27, 2023

Discovered

Dec 11, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Washington State AGbd_46415f2cecc8e6b72024-01-26 · +46dVerified
New Hampshire State AGbd_63b90faa80ccda952024-01-26 · +46dVerified by operator
Maine State AGbd_8e23d2bc69a338dc2024-01-26 · +46dVerified
Oregon State AGbd_aa3df6e17abb2cee2024-01-26 · +46dVerified

Show 6 more filings ↓up to 309d gap

California State AGbd_b5101c052f403dd42024-01-26 · +46dVerified
California State AGbd_3baa19847fe317a92024-03-22 · +102dVerified by operator
New Hampshire State AGbd_5da5a4567f12d3472024-03-29 · +109dVerified by operator
Maine State AGbd_b942c1dd7f723d7c2024-04-02 · +113dVerified by operator
California State AGbd_e5a4bff130cae61e2024-04-11 · +122dVerified by operator
California State AGbd_b81430bb11ab66382024-10-15 · +309dVerified by operator

Showing first 10 of 13 linked disclosures.

Name: Keenan & Associates
norm: keenan associates

Name: Keenan & Associates
norm: keenan associates
Industry: Professional Servicesllm

Discovered: Aug 27, 2023
Breach occurred: Aug 21, 2023 – Aug 27, 2023
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 12, 2023
Affected individuals: 727state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Employment
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Supporting federal law enforcement’s investigation

During the incident: Engaged leading third-party cybersecurity and forensic experts to assist
Took prompt action to contain it
Notified law enforcement
Changes made: Implemented additional security protocols designed to enhance the security of our network, internal systems and applications
Offering complimentary 24-month membership to Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGDec 11 · first · this page

Washington State AG+46d

New Hampshire State AG+46d

Maine State AG+46d

Oregon State AG+46d

California State AG+46d

California State AG+102d

New Hampshire State AG+109d

Maine State AG+113d

California State AG+122d

California State AG+309d

Pattern: first filing Dec 11 (MT), last Oct 15 (CA) — a 309-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-935.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2023
Raw hash: 20c1a52ccac06171db5d5639b824a6e75e669bfe407ac335fb716806cb2af02d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityKeenan & Associates

Victim entityKeenan & Associates

Incidentdiscovered Aug 27, 2023

Stated responseEngaged leading third-party cybersecurity and forensic experts to assist

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov