HackingFinancial ServicesFinanceStolen CredentialsTargetedFinancial accountIdentity (basic)Government IDPHIPIIHealth (basic)MediumContained

Ulrich Consulting & Investment Group, LLC

bd_34d6abb93321db0d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 31, 2024

Filed

Apr 7, 2025

To disclose

23 weeks

Affected

533state residents only

Linked

4 filings

Confidence

71%

Full breach record for Ulrich Consulting & Investment Group, LLC →2 incidents on file

Ulrich Consulting & Investment Group, LLC d/b/a Ulrich Inves notified Washington residents that an employee email account was subject to unauthorized access between Oct 14 and Oct 31, 2024. The breach was discovered on Oct 31, 2024. Affected data included names and other personal information. 533 Washington residents were affected. The company engaged forensic specialists and provided credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d23 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 17 days

discovery → filing · 23 weeks / 158 days

Oct 14, 2024

Begins

Oct 31, 2024

Discovered

Apr 7, 2025

Filed

vs. sector median

+14 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_2edd5db5bd3701c02025-02-28 · +38dVerified
Nebraska State AGbd_c3f5e198bc9bd5182025-02-28 · +38dVerified
Montana State AGbd_ef1021ea6e30c29c2025-02-28 · +38dCandidate

Name: Ulrich Consulting & Investment Group, LLC
norm: ulrich consulting investment

Name: Ulrich Consulting & Investment Group, LLC
norm: ulrich consulting investment
Also named: Ulrich Consulting & Investment Group, LLCdba oflegal entity
Ulrich Invesdba oftrade name
Industry: Financial Servicesllm

Discovered: Oct 31, 2024
Breach occurred: Oct 14, 2024 – Oct 31, 2024
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 7, 2025
Affected individuals: 533state-resident count only
Data types: Identity (basic)PII
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Immediately took steps to secure the affected account
Engaged third-party forensic specialists to investigate the incident
Took steps to secure our email tenant
Undertook a thorough investigation
Arranged for you to enroll, at no cost to you, in an online credit monitoring services through IDX
Changes made: Secured the affected account
Secured our email tenant
Undertook a thorough investigation
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(158 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGFeb 28 · first

Nebraska State AGFeb 28 · first

Montana State AGFeb 28 · first

Washington State AG+38d · this page

Pattern: first filing Feb 28 (NH), last Apr 7 (WA) — a 38-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA32947.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 7, 2025
Raw hash: ffe6d85fad369204ff3b7f4acaff9e6e2ff15a3e6700f320b4edde15de96afc6

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityUlrich Consulting & Investment Group, LLC

Victim entityUlrich Consulting & Investment Group, LLC

Incidentdiscovered Oct 31, 2024

Stated responseImmediately took steps to secure the affected account

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com