HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountPHIMediumContained

Langabeer McKernan Burnett & Co.

bd_15f88e6d80970892 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 15, 2025

Filed

Sep 11, 2025

To disclose

27 days

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for Langabeer McKernan Burnett & Co. →

Langabeer McKernan Burnett & Co. notified Montana residents of a data breach discovered on August 15, 2025. Unauthorized access compromised SSNs, driver's licenses, financial accounts, health insurance info, and names. The firm isolated systems, engaged forensic investigators, changed credentials, and enhanced security. Affected individuals received 12 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 days

Aug 15, 2025

Discovered

Sep 11, 2025

Filed

vs. sector median

15 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Washington State AGbd_81d4a9df5676b0882025-09-11Verified
Indiana State AGbd_f95fa7f4a16c6e092025-09-11Verified

Name: Langabeer McKernan Burnett & Co.
norm: langabeer mckernan burnett

Name: Langabeer McKernan Burnett & Co.
norm: langabeer mckernan burnett
Industry: Professional Servicesllm

Discovered: Aug 15, 2025
Materiality determined: —
Notification sent: Sep 11, 2025
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)Financial accountPHI
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Isolated the affected systems
Engaged a specialized third-party cybersecurity firm to assist with securing the environment
Conducted a comprehensive forensic investigation
Disconnected all access to our network
Changed administrative credentials
Restored operations in a safe and secure mode
Enhanced the security measures
Provided access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for twelve (12) months
Changes made: Enhanced the security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Washington State AGSep 11 · first

Indiana State AGSep 11 · first

Montana State AGSep 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/09/Consumer-notification-letter-32.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 11, 2025
Raw hash: 755e1542dfa0d372e86a5c7fdc11a9537d82af0bb3a9645f59edb68191b9c319

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLangabeer McKernan Burnett & Co.

Victim entityLangabeer McKernan Burnett & Co.

Incidentdiscovered Aug 15, 2025

Stated responseIsolated the affected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov