MalwareFinancial ServicesHealthcareFinanceRansomwareRansom DemandedRansom PaidData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

BBS Financial Services, LLC

bd_1da1372591c52265 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 29, 2024

Filed

Nov 11, 2024

To disclose

41 weeks

Affected

2state residents only

Linked

5 filings

Confidence

67%

Full breach record for BBS Financial Services, LLC →

BBS Financial Service, LLC disclosed a ransomware incident on Jan 29, 2024, where a threat actor exfiltrated data and demanded ransom. BBS paid the ransom and engaged forensic experts. Affected data included medical billing records, tax returns, and payroll information containing PII, SSNs, and financial/health data. FBI and IRS were notified. Equifax credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 41 weeks / 287 days

Jan 29, 2024

Discovered

Nov 11, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_055878f91c03cfc42024-11-11Verified
Maine State AGBianLianbd_19b6ae23508a80362024-11-11Verified
Massachusetts State AGbd_411aa04bdea46b162024-11-11Verified
Indiana State AGbd_f7c771b45c51aa8c2024-06-18 · +146dCandidate

Name: BBS Financial Services, LLC
norm: bbs financial
Domain: bbs1040.com

Name: BBS Financial Services, LLC
norm: bbs financial
Domain: bbs1040.com
Industry: Financial ServicesllmHealthcarellm

Discovered: Jan 29, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed a report with the FBIContacted the cybersecurity division of the Internal Revenue Service (IRS)
Initial access: valid_credentials

During the incident: Engaged cybersecurity counsel and a forensic expert to investigate
Filed a report with the FBI
Negotiated and paid a ransom
Offered 2-year identity and credit protection program through Equifax
Changes made: Monitored the dark web for data disclosure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(287 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJun 18 · first

California State AG+146d

Maine State AG+146d

Massachusetts State AG+146d

Montana State AG+146d · this page

Pattern: first filing Jun 18 (IN), last Nov 11 (MT) — a 146-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/01/Consumer-notification-letter-9.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 11, 2024
Raw hash: 671f82f529bef2f57b0488d0f052966f033a2f5367a9a7a10eb48bcf97907478

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBBS Financial Services, LLC

Victim entityBBS Financial Services, LLC

Incidentdiscovered Jan 29, 2024

Stated responseEngaged cybersecurity counsel and a forensic expert to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov