HackingOtherStolen CredentialsCapture Stored DataData ExfiltratedTargetedPIIIdentity (basic)LowContained

1st Lake Properties, Inc.

bd_253dcb1dd32ca8a8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 25, 2021

Filed

Jul 22, 2022

To disclose

30 weeks

Affected

7state residents only

Linked

3 filings

Confidence

66%

Full breach record for 1st Lake Properties, Inc. →2 incidents on file

1st Lake Properties, Inc. notified Montana residents of a cyberattack discovered on December 25, 2021, which disrupted its IT network. An unauthorized third party may have exfiltrated personal information including names. The company engaged forensic experts, notified law enforcement, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 30 weeks / 209 days

Dec 25, 2021

Begins

Dec 25, 2021

Discovered

Jul 22, 2022

Filed

vs. sector median

+24 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_2ca2cbd9f1f3f7a62022-08-12 · +21dVerified by operator
Massachusetts State AGbd_62ce62387b8783eb2022-08-15 · +24dVerified

Name: 1st Lake Properties, Inc.
norm: 1st lake properties

Name: 1st Lake Properties, Inc.
norm: 1st lake properties
Industry: Otherllm

Discovered: Dec 25, 2021
Breach occurred: Dec 25, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 18, 2022
Affected individuals: 7state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Local and federal law enforcement were notified
Initial access: valid_credentials

During the incident: Immediately investigated and aggressively responded to this incident
Passwords were changed
Steps were taken to block the unauthorized access
Local and federal law enforcement were notified
Outside technical experts were engaged to investigate and evaluate the nature and scope of the incident
Offering 12 months of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Taking steps to enhance its security measures to help prevent something like this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(209 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJul 22 · first · this page

Maine State AG+21d

Massachusetts State AG+24d

Pattern: first filing Jul 22 (MT), last Aug 15 (MA) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-494.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2022
Raw hash: 471c2a217bc0e0744e2b2732df357f94b53140382b82500c719b2465553fdea7

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entity1st Lake Properties, Inc.

Victim entity1st Lake Properties, Inc.

Incidentdiscovered Dec 25, 2021

Stated responseImmediately investigated and aggressively responded to this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov