HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedIdentity (basic)LowContained

Concorde General Agency

bd_20fb12f4cf0558c8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 9, 2022

Filed

Apr 29, 2022

To disclose

11 weeks

Affected

485state residents only

Linked

3 filings

Confidence

67%

Full breach record for Concorde General Agency →

Concorde General Agency notified Montana residents of unauthorized network access detected on Feb 9, 2022. Perpetrators removed files containing names. Concorde contained the threat, restored data, and engaged forensic investigators. 12 months of credit monitoring via TransUnion offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 79 days

Feb 9, 2022

Discovered

Apr 29, 2022

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_5b579660169c5a492022-04-29Verified
Massachusetts State AGbd_8de86c1b49ad91a82022-04-29Verified

Name: Concorde General Agency
norm: concorde general agency

Name: Concorde General Agency
norm: concorde general agency
Industry: Professional Servicesllm

Discovered: Feb 9, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 485state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Contained the threat by disabling all unauthorized access to our network
Restored all encrypted data
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Provided you with 12 months of free credit monitoring and identity theft protection services through TransUnion
Changes made: Continually evaluate and modify our practices to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGApr 29 · first

Massachusetts State AGApr 29 · first

Montana State AGApr 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-335.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2022
Raw hash: d10f6264421d4a0d1d11998ceedce45b28c1ad84c201509630d570421aca648d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityConcorde General Agency

Victim entityConcorde General Agency

Incidentdiscovered Feb 9, 2022

Stated responseContained the threat by disabling all unauthorized access to our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov