HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)CredentialsHighContained

Livingston Street Capital, LLC

bd_2c1ba5c0d12f0af4 · schema v1 · pii pii-v1

Severity

High

Discovered

May 3, 2023

Filed

Oct 25, 2023

To disclose

25 weeks

Affected · nationwide

1,3471 in this filing

Linked

5 filings

Confidence

66%

Full breach record for Livingston Street Capital, LLC →

Livingston Street Capital, LLC notified affected individuals of a data breach discovered on May 3, 2023. Unauthorized access to employee email accounts occurred between May 2-3, 2023. Approximately 1,347 individuals were impacted. Compromised data included names, SSNs, driver's license numbers, financial account info, DOB, medical/health insurance info, taxpayer IDs, usernames, passwords, and digital signatures. The company engaged third-party specialists, reset passwords, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 25 weeks / 175 days

May 2, 2023

Begins

May 3, 2023

Discovered

Oct 25, 2023

Filed

vs. sector median

+17 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_8e913e0b08964cb32023-10-25Verified by operator
Massachusetts State AGbd_90e9a888b9cb43e92023-10-25Verified
Indiana State AGbd_c1143f9759ffebeb2023-10-26 · +1dVerified
New Hampshire State AGbd_c69c50af7c95c88a2023-10-30 · +5dVerified

Name: Livingston Street Capital, LLC
norm: livingston street

Name: Livingston Street Capital, LLC
norm: livingston street
Industry: Financial Servicesllm

Discovered: May 3, 2023
Breach occurred: May 2, 2023 – May 3, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Oct 26, 2023
Affected individuals: 1,347state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Credentials
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified TransUnionNotified ExperianNotified Equifax
Initial access: valid_credentials

During the incident: Changed account passwords
Reviewed policies and procedures
Began an investigation with the assistance of third-party specialists
Providing access to complimentary credit monitoring and identity protection services
Changes made: Reviewed policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(175 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGOct 25 · first

Massachusetts State AGOct 25 · first

Montana State AGOct 25 · first · this page

Indiana State AG+1d

New Hampshire State AG+5d

Pattern: first filing Oct 25 (ME), last Oct 30 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-790.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2023
Raw hash: f7e1e6a6b2a7fb9b35bcc80134ce76a2ce1cc3a6bc29120adb5df87d0554f5ea

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLivingston Street Capital, LLC

Victim entityLivingston Street Capital, LLC

Incidentdiscovered May 3, 2023

Stated responseChanged account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov