AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

SATURNA CAPITAL CORPORATION

bd_3f8ba22ac903a237 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 27, 2017

Filed

Jan 27, 2017

To disclose

≤1 day

Affected

2state residents only

Confidence

66%

Full breach record for SATURNA CAPITAL CORPORATION →2 incidents on file

Saturna Capital Corporation notified the Washington AG that on Jan 18, 2017, a PDF containing PII (names, SSNs, DOBs, addresses) of 2 WA residents was inadvertently emailed to an unauthorized party. The company was notified by the recipient on Jan 27, 2017, and sent individual notifications that week. No fraud detected.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 9 days

discovery → filing · ≤1 day / 0 days

Jan 18, 2017

Begins

Jan 27, 2017

Discovered

Jan 27, 2017

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: SATURNA CAPITAL CORPORATION
norm: saturna capital
Domain: saturno.com

Name: SATURNA CAPITAL CORPORATION
norm: saturna capital
Domain: saturno.com
Industry: Financial Servicesllm

Discovered: Jan 27, 2017
Breach occurred: Jan 18, 2017
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 27, 2017
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1534 Internal Remote Services
Regulator citations: Reported the breach to the Washington State Attorney General

During the incident: Reported the breach to the Washington State Attorney General
Sending individualized notifications to each resident whose personally identifiable information was compromised
Providing the toll free telephone numbers, addresses, and websites of the major credit reporting agencies as well as the Federal Trade Commission
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9663.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2017
Raw hash: abb4b13cb0191e016dc62dc07f3fb2504b8c1de1d32bfcd1aed4a3a7130bf6e0

Reporting entitySATURNA CAPITAL CORPORATION

Victim entitySATURNA CAPITAL CORPORATION

Incidentdiscovered Jan 27, 2017

Stated responseReported the breach to the Washington State Attorney General

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com