HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Brotherhood's Relief & Compensation Fund

bd_2932afdb6b39c8b4 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 3, 2021

Filed

Feb 5, 2021

To disclose

5 weeks

Affected

1,059state residents only

Linked

9 filings

Confidence

66%

Full breach record for Brotherhood's Relief & Compensation Fund →

Brotherhood's Relief & Compensation Fund notified Montana residents of a cyber-attack on January 3, 2021. The Fund engaged forensic investigators and deployed additional safeguards. No evidence of misuse was found, but the Fund is offering credit monitoring and identity protection services to all members as a precaution.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 33 days

Jan 3, 2021

Begins

Jan 3, 2021

Discovered

Feb 5, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_06cd6dc1bb1ef3c72021-02-05Verified
South Carolina State AGbd_a74c380c4d808d932021-02-02 · +3dVerified
Oregon State AGbd_c29575298da392e42021-02-02 · +3dVerified
Washington State AGbd_f43a3f9376d22aa72021-02-02 · +3dVerified

Show 4 more filings ↓up to 35d gap

Massachusetts State AGbd_312d6182ca36100a2021-02-01 · +4dVerified
Maine State AGbd_7b8b0e7aa9b1e8f12021-01-29 · +7dCandidate
California State AGbd_d39dc9af73d77ad12021-01-29 · +7dVerified
Illinois State AGbd_20f22d1cfcf3d32e2021-01-01 · +35dVerified

Name: Brotherhood's Relief & Compensation Fund
norm: brotherhood s relief compensation

Name: Brotherhood's Relief & Compensation Fund
norm: brotherhood s relief compensation
Industry: Financial Servicesllm

Discovered: Jan 3, 2021
Breach occurred: Jan 3, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,059state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched a system recovery effort
Engaged the services of a highly recommended digital forensic investigation firm
Conducted a review of system security
Deployed additional, redundant safeguards to protect member information
Reassessing our business relationships with several information technology providers
Extend credit monitoring and identity protective services to every individual in our database
Changes made: Deployed additional, redundant safeguards to protect member information
Reassessing our business relationships with several information technology providers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+28d

California State AG+28d

Massachusetts State AG+31d

South Carolina State AG+32d

Oregon State AG+32d

Washington State AG+32d

Indiana State AG+35d

Montana State AG+35d · this page

Pattern: first filing Jan 1 (IL), last Feb 5 (MT) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Brother-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 5, 2021
Raw hash: 5a5c358aec1fc61f54b296854417029b6e264dc368a4f6e2fb6a681a56b96589

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityBrotherhood's Relief & Compensation Fund

Victim entityBrotherhood's Relief & Compensation Fund

Incidentdiscovered Jan 3, 2021

Stated responseLaunched a system recovery effort

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov