MalwareFinancial ServicesTechnologyFinanceRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentHighActive

WERCS

bd_3fd080060c1703b9 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 13, 2023

Filed

Mar 13, 2024

To disclose

13 weeks

Affected · nationwide

6,52656 in this filing

Linked

3 filings

Confidence

67%

Full breach record for WERCS →

WERCS d/b/a Wyoming Financial Group disclosed a ransomware attack discovered on December 13, 2023, which led to unauthorized access to employee and tax documents. Approximately 6,526 individuals were affected, with data including names, SSNs, and DOBs at risk. The company engaged forensic specialists, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 91 days

Dec 13, 2023

Discovered

Mar 13, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_d5d4a1cfafb225632024-03-13Verified
Massachusetts State AGbd_ed9ac87c8a2cd1482024-03-13Verified

Name: WERCS
norm: wercs

Name: WERCS
norm: wercs
Also named: WERCSdba oflegal entity
Wyoming Financial Groupdba oftrade name
Industry: Financial ServicesllmTechnologyllm

Discovered: Dec 13, 2023
Materiality determined: —
Notification sent: Mar 13, 2024
Affected individuals: 6,526state + nationwide
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Engaged third-party forensic specialists to investigate
Reported incident to federal law enforcement
Provided complimentary credit monitoring and identity protection services through IDX
Conducted investigation and reviewed policies and procedures related to data protection
Implemented new hardware, new practices, and new security software protocols
Changes made: Implemented new hardware
Implemented new practices
Implemented new security software protocols
Reviewed policies and procedures related to data protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 13 · first

Massachusetts State AGMar 13 · first

Montana State AGMar 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1184.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2024
Raw hash: 1467a443f3406b9f45e903740bfaea06e8c9bc41a9a2ee1a26a782b38ab96586

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWERCS

Victim entityWERCS

Incidentdiscovered Dec 13, 2023

Stated responseEngaged third-party forensic specialists to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov