UnknownFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDMedium

CRB GROUP, INC.

bd_1b0368e8efedb4bb · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 21, 2024

To disclose

—

Affected

1state residents only

Linked

6 records

Confidence

63%

Full breach record for CRB GROUP, INC. →2 incidents on file

CRB Group Inc issued a consumer notification letter regarding a cybersecurity incident affecting individuals in multiple jurisdictions including Montana, Maryland, New York, North Carolina, Rhode Island, and D.C. The letter provides instructions for credit monitoring, fraud alerts, and credit freezes, indicating potential exposure of personal and government-issued identification data. No specific dates of occurrence or discovery are stated in the provided text.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Aug 21, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 6 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 178 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_e71f054d4e07a83e2023-12-24 · +241dVerified by operator

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_49ff40255db6cfb52024-08-21Verified
Maine State AGbd_5e29086617cf07f22024-08-21Verified by operator
Indiana State AGbd_d7da9110f4502c632024-08-21Verified
Massachusetts State AGbd_f6db377cc4e5b1212024-08-21Verified

Name: CRB GROUP, INC.
norm: crb group
Domain: crbgroup.com

Name: CRB GROUP, INC.
norm: crb group
Domain: crbgroup.com
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown

During the incident: Offering complimentary credit monitoring and identity protection services
Providing instructions for placing fraud alerts and credit freezes
Directing individuals to contact credit reporting bureaus (TransUnion, Experian, Equifax)
Directing individuals to the Federal Trade Commission (FTC)
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGAug 21 · first

Maine State AGAug 21 · first

Indiana State AGAug 21 · first

Massachusetts State AGAug 21 · first

Montana State AGAug 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1613.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2024
Raw hash: 355ac504f0513cbb6e4eabfc34b10386e80c8f91a147017be0ce3ccbaa3c403d

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityCRB GROUP, INC.

Victim entityCRB GROUP, INC.

IncidentUnknown

Stated responseOffering complimentary credit monitoring and identity protection services

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov