Social EngineeringTechnologyInformationPhishingStolen CredentialsCustomer Data InvolvedTargetedPIICredentialsIdentity (basic)LowContained

FireKing Security Group LLC

bd_2138724988cf9313 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 3, 2019

Filed

Aug 19, 2019

To disclose

20 weeks

Affected · nationwide

21 in this filing

Linked

3 filings

Confidence

66%

Full breach record for FireKing Security Group LLC →

FireKing Security Group, LLC notified Montana residents of a data breach where unauthorized access to two employees' email accounts occurred between Feb 18 and Apr 3, 2019. Suspicious activity was detected on Apr 3, 2019. The incident involved phishing and credential compromise, exposing personal information. FireKing engaged forensic experts and secured accounts.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 44 days

discovery → filing · 20 weeks / 138 days

Feb 18, 2019

Begins

Apr 3, 2019

Discovered

Aug 19, 2019

Filed

vs. sector median

+1 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_f61311d713a21cf32019-08-19Verified
New Hampshire State AGbd_03c1e081a6a489922019-08-23 · +4dVerified

Name: FireKing Security Group LLC
norm: fireking security

Name: FireKing Security Group LLC
norm: fireking security
Industry: Technologyllm

Discovered: Apr 3, 2019
Breach occurred: Feb 18, 2019 – Apr 3, 2019
Undetected for: 44 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 26, 2019
Affected individuals: 2state + nationwide
Data types: PIICredentialsIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: notified state regulators, as required
Initial access: phishing_link

During the incident: Immediately launched an investigation, with the support of third-party forensic experts
Took steps to secure the email accounts
Changes made: Working to review our existing policies and procedures
Implement additional safeguards to further secure the information in our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(138 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGAug 19 · first

Montana State AGAug 19 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-71.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2019
Raw hash: af1557423b158977d985cab734015c1217e35f66f713495521279e6635423738

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFireKing Security Group LLC

Victim entityFireKing Security Group LLC

Incidentdiscovered Apr 3, 2019

Stated responseImmediately launched an investigation, with the support of third-party forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov