MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedSupply Chain (3P Vendor)PIILowContained

Hallmark Aviation Services, LP

bd_2089e3cd18dcdb0b · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 3, 2022

Filed

Sep 30, 2022

To disclose

34 weeks

Affected

1state residents only

Linked

4 filings

Confidence

64%

Full breach record for Hallmark Aviation Services, LP →

Hallmark Aviation Services, LP notified Montana residents of a data breach involving its vendor. Unauthorized access occurred Feb 1-3, 2022, resulting in network encryption. Personal information was impacted. Hallmark engaged forensic experts and law enforcement, took systems offline, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 34 weeks / 239 days

Feb 1, 2022

Begins

Feb 3, 2022

Discovered

Sep 30, 2022

Filed

vs. sector median

+15 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2bcbe9bdf880c9d12022-09-29 · +1dVerified
Indiana State AGbd_6cc1714eb34a674f2022-09-29 · +1dVerified
California State AGbd_f5ce558003ef192e2022-09-29 · +1dCandidate

Name: Hallmark Aviation Services, LP
norm: hallmark aviation

Name: Hallmark Aviation Services, LP
norm: hallmark aviation
Industry: Professional Servicesllm

Discovered: Feb 3, 2022
Breach occurred: Feb 1, 2022 – Feb 3, 2022
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2022
Affected individuals: 1state-resident count only
Data types: PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: External
Regulator citations: engaged with law enforcement
Initial access: supply_chain

During the incident: Launched a comprehensive investigation with the assistance of cybersecurity experts
Engaged with law enforcement
Took proactive measures to remove the unauthorized user and ensure the security of its systems
Affected servers were immediately taken offline and analyzed
Conducted a thorough and time-intensive review of the impacted information
Offering complimentary access to Experian IdentityWorks
Changes made: Took steps to further secure its systems to prevent an incident like this in the future
Continues to make additional improvements that strengthen its cybersecurity protections
Continues to monitor for any unauthorized use of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(239 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGSep 29 · first

Indiana State AGSep 29 · first

California State AGSep 29 · first

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-589.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2022
Raw hash: ba11a8db848521de04b7d682ce071a8d06c1e2ad9df9d032b3fa615e0a68871e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHallmark Aviation Services, LP

Victim entityHallmark Aviation Services, LP

Incidentdiscovered Feb 3, 2022

Stated responseLaunched a comprehensive investigation with the assistance of cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov