HackingProfessional ServicesProfessional ServicesTargetedIdentity (basic)LowContained

Hayloft Property Management

bd_1e2c15d4aa0699e1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 25, 2025

Filed

Mar 13, 2025

To disclose

16 days

Affected

1state residents only

Linked

5 filings

Confidence

65%

Full breach record for Hayloft Property Management →

Hayloft Property Management Company notified Montana residents of a data security incident. An unknown actor gained unauthorized access to the network between Dec 24-26, 2024. The company discovered the potential involvement of personal information on Feb 25, 2025. Notices were sent on March 13, 2025, offering credit monitoring. Data involved likely included names and other personal identifiers.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 63 days

discovery → filing · 16 days

Dec 24, 2024

Begins

Feb 25, 2025

Discovered

Mar 13, 2025

Filed

vs. sector median

16 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_8109d728a5155f022025-01-22 · +49dVerified

Regulatory filings (3) · sorted by filing gap

Nebraska State AGbd_39d850042c2b2add2025-03-13Verified by operator
Indiana State AGbd_76d63861ccc8ff392025-03-13Verified
Iowa State AGbd_ebefcda6977de4872025-03-13Verified

Name: Hayloft Property Management
norm: hayloft property management
Domain: hayloftapartmenthomes.com

Name: Hayloft Property Management
norm: hayloft property management
Domain: hayloftapartmenthomes.com
Industry: Professional Servicesllm

Discovered: Feb 25, 2025
Breach occurred: Dec 24, 2024 – Dec 26, 2024
Undetected for: 63 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 13, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation with the support of external cybersecurity experts
Took steps to secure our IT environment
Implementing enhanced security measures
Offering you the opportunity to enroll in complimentary credit monitoring and identity theft protection services through IDX
Changes made: Implementing enhanced security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Nebraska State AGMar 13 · first

Indiana State AGMar 13 · first

Iowa State AGMar 13 · first

Montana State AGMar 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/03/Consumer-notification-letter-245.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2025
Raw hash: b2d790c7cb13e1f950157855418aa5f568adfb2aa4d5bb61fe4f6586d543b63d

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityHayloft Property Management

Victim entityHayloft Property Management

Incidentdiscovered Feb 25, 2025

Stated responseLaunched an investigation with the support of external cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov