MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedTargetedPIIIdentity (basic)LowContained

OSMOSE UTILITIES SERVICES, INC.

bd_24b836c4a311828f · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 13, 2020

Filed

Sep 3, 2020

To disclose

7 weeks

Affected

303state residents only

Linked

7 filings

Confidence

66%

Full breach record for OSMOSE UTILITIES SERVICES, INC. →2 incidents on file

Osmose Utilities Services, Inc. notified employees of a July 13, 2020 cyber attack where systems were encrypted. The incident involved access to folders containing current and former employee information. Osmose secured systems, engaged forensic investigators, and restored operations. Affected individuals were offered one year of identity monitoring through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 52 days

Jul 13, 2020

Begins

Jul 13, 2020

Discovered

Sep 3, 2020

Filed

vs. sector median

11 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_2a7570e66abab7c92020-09-03Verified
Massachusetts State AGbd_5020ef05fe5766f82020-09-03Verified
Indiana State AGbd_5cce121194e63de12020-09-03Verified
Oregon State AGbd_a8afd7e4cc20783e2020-09-03Verified

Show 2 more filings ↓up to 1d gap

Washington State AGbd_cba9ddf284408d422020-09-03Verified
New Hampshire State AGbd_78c79377cfb402752020-09-04 · +1dVerified

Name: OSMOSE UTILITIES SERVICES, INC.
norm: osmose utilities

Name: OSMOSE UTILITIES SERVICES, INC.
norm: osmose utilities
Industry: Professional Servicesllm

Discovered: Jul 13, 2020
Breach occurred: Jul 13, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 303state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial

During the incident: Secured the affected systems
Launched an investigation to determine the nature and scope of the incident
Engaged a specialized cybersecurity firm to assist
Restored computer systems to fully operational
Reviewed the contents of the files to identify the types of personal information involved
Engaged Kroll to provide identity monitoring at no cost for one year
Changes made: Enhancing existing security protocols
Re-educating employees for awareness on these types of incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGSep 3 · first

Massachusetts State AGSep 3 · first

Indiana State AGSep 3 · first

Oregon State AGSep 3 · first

Washington State AGSep 3 · first

Montana State AGSep 3 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-Notification-Details-8.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 3, 2020
Raw hash: 0d63067a1d9a6c51483166c69d32d1ca2d77a07a46599d7a6b4eafc5af970422

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityOSMOSE UTILITIES SERVICES, INC.

Victim entityOSMOSE UTILITIES SERVICES, INC.

Incidentdiscovered Jul 13, 2020

Stated responseSecured the affected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov