Social EngineeringTechnologyInformationPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

CertifiedSafety, Inc.

bd_37f44ab5c2e8048d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 12, 2020

Filed

Feb 25, 2021

To disclose

37 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for CertifiedSafety, Inc. →

CertifiedSafety, Inc. notified Montana AG of a June 2020 email account compromise likely caused by phishing. Exposed data included names, addresses, DOB, SSNs, and driver's license info. The company engaged forensic specialists, secured its network, and offered 12 months of credit monitoring via IDX. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 37 weeks / 258 days

Jun 12, 2020

Begins

Jun 12, 2020

Discovered

Feb 25, 2021

Filed

vs. sector median

+18 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_55247fee0dd9bab92021-02-25Verified
Indiana State AGbd_ff447bb0c758ff972021-02-25Verified

Name: CertifiedSafety, Inc.
norm: certifiedsafety

Name: CertifiedSafety, Inc.
norm: certifiedsafety
Industry: Technologyllm

Discovered: Jun 12, 2020
Breach occurred: Jun 12, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 25, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Engaged third-party forensic specialists to assist in its analysis of any unauthorized activity
Moved quickly to initiate a response, which included conducting an investigation with the assistance of IT specialists
Confirmed the security of our network environment
Reviewed and altered our policies and procedures relating to the security of our systems and servers
Offering credit monitoring and identity theft protection services through IDX
Changes made: Reviewed and altered our policies and procedures relating to the security of our systems and servers
Altered our information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(258 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGFeb 25 · first

Indiana State AGFeb 25 · first

Montana State AGFeb 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-53.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2021
Raw hash: 47d7b86c7f6c0f89132b36cc2d16b58715e0f7c72ea53ad165aaee6f1a107079

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCertifiedSafety, Inc.

Victim entityCertifiedSafety, Inc.

Incidentdiscovered Jun 12, 2020

Stated responseEngaged third-party forensic specialists to assist in its analysis of any unauthorized activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov