Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)MinorMediumContained

Freund Freeze & Arnold

bd_34630e98ba2c171d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 20, 2021

Filed

Jun 29, 2021

To disclose

23 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Freund Freeze & Arnold →

Freund Freeze & Arnold notified individuals of unauthorized access to an employee's email account between Jan 5-25, 2021, discovered Jan 20, 2021. Access was likely via phishing. Data involved included names and minor identifiers. The firm engaged forensic investigators, secured the mailbox, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 15 days

discovery → filing · 23 weeks / 160 days

Jan 5, 2021

Begins

Jan 20, 2021

Discovered

Jun 29, 2021

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Freund Freeze & Arnold
norm: freund freeze arnold

Name: Freund Freeze & Arnold
norm: freund freeze arnold
Industry: Professional Servicesllm

Discovered: Jan 20, 2021
Breach occurred: Jan 5, 2021 – Jan 25, 2021
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Minor
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Took steps to secure the mailbox
Began working with a third-party forensic specialist firm to investigate
Undertaking a review of our existing policies, procedures, and training programs
Implementing additional safeguards to further secure the information in our systems
Offering 12 months of complimentary access to credit monitoring, fraud consultation, and identity theft restoration services
Changes made: Undertaking a review of our existing policies, procedures, and training programs
Implementing additional safeguards to further secure the information in our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(160 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-36.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2021
Raw hash: 64a9d0e259df2979cdbfca961c6fda6060894286b06fbdf44a8ffb6548fc96ff

Reporting entityFreund Freeze & Arnold

Victim entityFreund Freeze & Arnold

Incidentdiscovered Jan 20, 2021

Stated responseTook steps to secure the mailbox

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov