Social EngineeringProfessional ServicesProfessional ServicesPhishingRansom DemandedTargetedIdentity (basic)Government IDFinancialMediumContained

Colorado Nonprofit Development Center

bd_32932226b4e98f98 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 3, 2017

Filed

Mar 16, 2017

To disclose

13 days

Affected

1state residents only

Confidence

64%

Full breach record for Colorado Nonprofit Development Center →

Colorado Nonprofit Development Center experienced a Business Email Compromise (BEC) on March 3, 2017. An attacker spoofed a management email to request 2016 W-2 forms. CNDC inadvertently sent employee W-2s containing names, addresses, SSNs, and wage info. CNDC notified law enforcement and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 days

Mar 3, 2017

Begins

Mar 3, 2017

Discovered

Mar 16, 2017

Filed

vs. sector median

16 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Colorado Nonprofit Development Center
norm: colorado nonprofit development center
Domain: cndc.org

Name: Colorado Nonprofit Development Center
norm: colorado nonprofit development center
Domain: cndc.org
Industry: Professional Servicesllm

Discovered: Mar 3, 2017
Breach occurred: Mar 3, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 16, 2017
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: contacted CBI, the Attorney General’s officecontacted the IRS, state tax agencies, and law enforcement regarding this incident
Initial access: phishing_link

During the incident: Contacting CBI, the Attorney General’s office
Purchasing credit monitoring for any impacted employee
Contacted the IRS, state tax agencies, and law enforcement regarding this incident
Changes made: Implement additional safeguards
Provide additional mandatory training to our employees on safeguarding the privacy and security of information on our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Colorado-Nonprofit-Development-Center.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 16, 2017
Raw hash: 3021310791c59e3f860eb06cacfa4ede365971a02fd59aae6d1d21f2ce404d1f

Reporting entityColorado Nonprofit Development Center

Victim entityColorado Nonprofit Development Center

Incidentdiscovered Mar 3, 2017

Stated responseContacting CBI, the Attorney General’s office

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov