HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountPIIMediumContained

Branton de Jong and Associates

bd_1950c9a414bfdd5a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 16, 2018

Filed

Mar 27, 2018

To disclose

11 days

Affected

1state residents only

Linked

3 filings

Confidence

64%

Full breach record for Branton de Jong and Associates →

Branton, de Jong and Associates notified clients of a data breach where unauthorized access occurred between Feb 11-26, 2018, detected on March 16, 2018. Access was from a foreign IP. Data included names, SSNs, tax info, and bank details. The firm hired forensic IT, notified the FBI/IRS, and offered ID protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 11 days

Feb 11, 2018

Begins

Mar 16, 2018

Discovered

Mar 27, 2018

Filed

vs. sector median

16 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_19d22f515f8fba492018-03-25 · +2dVerified
Massachusetts State AGbd_48613da3294895152018-03-25 · +2dVerified

Name: Branton de Jong and Associates
norm: branton de jong and associates

Name: Branton de Jong and Associates
norm: branton de jong and associates
Industry: Professional Servicesllm

Discovered: Mar 16, 2018
Breach occurred: Feb 11, 2018 – Feb 26, 2018
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 27, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the FBINotified the IRSNotified all applicable state agencies
Initial access: valid_credentials

During the incident: Changed all passwords
Hired a leading, specialized forensic IT firm
Notified the FBI
Notified the IRS
Notified all three credit bureaus
Notified all applicable state agencies
Reviewed our security measures
Providing complimentary identity theft protection services through ID Experts
Changes made: Reviewed our security measures to ensure reasonable steps have been taken to avoid such an incident from occurring again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGMar 25 · first

Massachusetts State AGMar 25 · first

Montana State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Branton-de-Jong-and-Associates.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2018
Raw hash: 0c629fc8985050fc42777f3c4e3b9a6cf91f09d61a16f5a3f0ffb92660347748

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBranton de Jong and Associates

Victim entityBranton de Jong and Associates

Incidentdiscovered Mar 16, 2018

Stated responseChanged all passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov