HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)Government IDPHIMediumContained

FloWorks International, LLC

bd_1b1b8819136fc44c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 21, 2021

Filed

May 13, 2021

To disclose

22 days

Affected

15state residents only

Linked

4 filings

Confidence

66%

Full breach record for FloWorks International, LLC →

FloWorks International, LLC notified Montana AG of a security incident discovered on April 21, 2021, where personnel records were downloaded without authorization. Affected data included names, SSNs, and in some cases passport, driver's license, or health insurance numbers. The company notified law enforcement, engaged outside experts, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 days

Apr 21, 2021

Discovered

May 13, 2021

Filed

vs. sector median

16 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_cf333803ed0c80b52021-06-30 · +48dVerified
Massachusetts State AGbd_2cb26803db4c5d482021-07-06 · +54dVerified
New Hampshire State AGbd_0b526f63bc468dac2021-07-09 · +57dVerified

Name: FloWorks International, LLC
norm: floworks international

Name: FloWorks International, LLC
norm: floworks international
Industry: Technologyllm

Discovered: Apr 21, 2021
Materiality determined: —
Notification sent: Jun 30, 2021
Affected individuals: 15state-resident count only
Data types: PIIIdentity (basic)Government IDPHI
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Notified law enforcement
Working with outside experts to investigate
Offering one year of complimentary credit monitoring services
Changes made: Installed additional security monitoring tools
Implemented new processes
Focus on improving the cyber-resiliency and security posture of our company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGMay 13 · first · this page

Indiana State AG+48d

Massachusetts State AG+54d

New Hampshire State AG+57d

Pattern: first filing May 13 (MT), last Jul 9 (NH) — a 57-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/floSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2021
Raw hash: 92039ebcc2f47cbb1987ddbb9d1b8468660da1b318ec5dd12af484b9871b62ea

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFloWorks International, LLC

Victim entityFloWorks International, LLC

Incidentdiscovered Apr 21, 2021

Stated responseNotified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov