MalwareTechnologyInformationRansomwareData EncryptedTargetedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Liveaction inc.

bd_165ebb6a8cf71fc2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 22, 2023

Filed

Oct 30, 2023

To disclose

23 weeks

Affected

1state residents only

Linked

6 filings

Confidence

67%

Full breach record for Liveaction inc. →2 incidents on file

LiveAction, Inc. notified Montana residents of a ransomware attack detected on May 22, 2023. The incident compromised personal information including names, DOBs, SSNs, driver's licenses, medical/health insurance info, and financial data. LiveAction engaged forensic investigators, contacted the FBI, rebuilt systems, and offered one year of complimentary identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 23 weeks / 161 days

May 22, 2023

Discovered

Oct 30, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitenokoyawabd_4e388e698c35777e2023-05-22 · +161dVerified by operator
Leak Sitesnatchbd_ba6c37de083ccd6b2023-05-22 · +161dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2d01f8c6d8d82ad22023-10-30Verified by operator
Maine State AGbd_f74c1bf49d9299092023-10-30Candidate
New Hampshire State AGbd_f97c97df77f342902023-10-30Verified

Name: Liveaction inc.
norm: liveaction
Domain: liveaction.com

Name: Liveaction inc.
norm: liveaction
Domain: liveaction.com
Industry: Technologyllm

Discovered: May 22, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: contacted the US FBI

During the incident: Initiated our response protocols
Launched an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Contacted the US FBI
Took steps to mitigate the potential impact to our employees and business partners
Engaged a third-party to review the information that may have been impacted
Conducted an investigation with the assistance of IT specialists
Confirmed the security of our network environment
Wiped and rebuilt affected systems
Took steps to bolster our network security
Reviewed and altered our policies, procedures, and network security software
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Wiped and rebuilt affected systems
Took steps to bolster our network security
Reviewed and altered our policies, procedures, and network security software relating to the security of our systems and servers
Altered how we store and manage data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGOct 30 · first

Maine State AGOct 30 · first

New Hampshire State AGOct 30 · first

Montana State AGOct 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-806.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2023
Raw hash: d886865c32dac9dc127ff8368347343f50ff354a0501fa4c1d79a067a33b58da

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityLiveaction inc.

Victim entityLiveaction inc.

Incidentdiscovered May 22, 2023

Stated responseInitiated our response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov