Social EngineeringFinancial ServicesProfessional ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedCredentialsPIILowContained

Flexible Benefit Service Corporation

bd_370b189e415ee5b4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 6, 2017

Filed

Feb 14, 2018

To disclose

10 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Flexible Benefit Service Corporation →2 incidents on file

Flexible Benefit Service Corp notified Montana residents of a phishing attack on an employee's email account in Dec 2017. Attackers used stolen credentials to search for financial terms. Affected data included names and potentially other PII. The company reset credentials, retained forensic experts, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 70 days

Dec 6, 2017

Discovered

Feb 14, 2018

Filed

vs. sector median

+2 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_4a01d7b1f9ddf47f2018-02-14Verified
HHS OCRbd_d7b6072294e3948a2018-02-16 · +2dVerified

Name: Flexible Benefit Service Corporation
norm: flexible benefit service
Domain: flexiblebenefit.com

Name: Flexible Benefit Service Corporation
norm: flexible benefit service
Domain: flexiblebenefit.com
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Dec 6, 2017
Materiality determined: —
Notification sent: Feb 14, 2018
Affected individuals: 1state-resident count only
Data types: CredentialsPII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: providing notice of this event to consumer reporting agencies, state and federal regulators as required
Initial access: phishing_link

During the incident: Changed the employee’s email account credentials
Launched an investigation into this activity
Third party forensic experts were retained to assist with the investigation
Providing notice of this event to consumer reporting agencies, state and federal regulators as required
Providing you with information on how to protect against identity theft and fraud, as well as access to free credit monitoring and identity theft recovery services
Changes made: Continuing enhancing its ongoing employee training designed to help them identify and properly report potential email phishing scams
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(70 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 14 · first

Montana State AGFeb 14 · first · this page

HHS OCR+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Flexible-Benefit-Service-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 14, 2018
Raw hash: c3f88538ef0f2f699fdff89744ed6508c3b6b1ac231a64c26b43437adf0bc975

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFlexible Benefit Service Corporation

Victim entityFlexible Benefit Service Corporation

Incidentdiscovered Dec 6, 2017

Stated responseChanged the employee’s email account credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov