PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)LowContained

MCR Investors LLC

bd_3d78d47ff91ee8fc · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 11, 2018

Filed

Apr 23, 2018

To disclose

6 weeks

Affected

140state residents only

Linked

3 filings

Confidence

66%

Full breach record for MCR Investors LLC →

MCR Investors LLC notified Montana residents that a password-protected laptop containing personal information (names) was stolen from an employee on or before March 11, 2018. The company contacted law enforcement, remotely erased the device, and offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 43 days

Mar 11, 2018

Discovered

Apr 23, 2018

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_775c3d2f5f9475b32018-04-23Verified
Massachusetts State AGbd_b527917f0f9464282018-04-23Verified

Name: MCR Investors LLC
norm: mcr investors

Name: MCR Investors LLC
norm: mcr investors
Industry: Financial Servicesllm

Discovered: Mar 11, 2018
Materiality determined: —
Notification sent: Apr 23, 2018
Affected individuals: 140state-resident count only
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: contacted law enforcement

During the incident: Contacted law enforcement
Commenced an investigation
Took steps to remotely erase the laptop
Changes made: Reviewing our existing security controls to protect sensitive data on laptops
Re-educating our employees regarding the protection of sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGApr 23 · first

Massachusetts State AGApr 23 · first

Montana State AGApr 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/MCR-Investors-LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2018
Raw hash: 0c0e5242b29395e2986cb3ff26f9f4f087a1bf8697337547c5da841168b68e93

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMCR Investors LLC

Victim entityMCR Investors LLC

Incidentdiscovered Mar 11, 2018

Stated responseContacted law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov