Social EngineeringTransportation & LogisticsTransportationPhishingTargetedCustomer Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Ameriflight

bd_27c5fd8ab47b6df1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 20, 2017

Filed

Mar 28, 2017

To disclose

8 days

Affected

2state residents only

Linked

2 filings

Confidence

64%

Full breach record for Ameriflight →

Ameriflight, LLC notified Montana residents of a phishing incident occurring the week of March 20, 2017. An unauthorized actor posed as an executive to solicit employee PII (names, SSNs, wages). Ameriflight investigated, notified law enforcement, and offered 12 months of Experian Identity Works.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 days

Mar 20, 2017

Begins

Mar 20, 2017

Discovered

Mar 28, 2017

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_6b7ad1d0f342ecc62017-03-27 · +1dVerified

Name: Ameriflight
norm: ameriflight

Name: Ameriflight
norm: ameriflight
Industry: Transportation & Logisticsllm

Discovered: Mar 20, 2017
Breach occurred: Mar 20, 2017 – Mar 26, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 28, 2017
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified local law enforcement
Initial access: phishing_link

During the incident: Undertook an investigation to assess this incident
Notified local law enforcement
Reminded its employees handling personal information of the need to be cautious about requests for sensitive information
Arranged with Experian to assist you with related matters and for your enrollment at your option and at no cost to you for at least 12 months with their Identity Works program
Changes made: Reminded its employees handling personal information of the need to be cautious about requests for sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMar 27 · first

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Ameriflight.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 28, 2017
Raw hash: 74c6ee2d75079784440bd853f8f6b044fe41d930afea87c16c15b8b7bc80e58d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAmeriflight

Victim entityAmeriflight

Incidentdiscovered Mar 20, 2017

Stated responseUndertook an investigation to assess this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov