HackingOtherStolen CredentialsTargetedIdentity (basic)Government IDHealth (basic)HighContained

International Mission Board

bd_4301755604d700af · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 11, 2018

Filed

Jul 16, 2018

To disclose

14 weeks

Affected

7,783state residents only

Linked

7 filings

Confidence

65%

Full breach record for International Mission Board →

International Mission Board notified South Carolina residents of a data breach discovered on April 11, 2018. An unknown criminal actor accessed a data file containing personal information (name, SSN, DOB, health info) of field personnel, volunteers, and staff. IMB terminated access, engaged forensic experts, notified law enforcement, and offered 12 months of credit monitoring via ID Experts.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 14 weeks / 96 days

Apr 11, 2018

Discovered

Jul 16, 2018

Filed

vs. sector median

+6 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_1e1369f1c0be557a2018-07-06 · +10dVerified
New Hampshire State AGbd_2e8a0c7eb3e6b2df2018-07-06 · +10dVerified
Massachusetts State AGbd_6a19fcd136c9f5c22018-07-06 · +10dVerified
Oregon State AGbd_a4f2be36b26874c22018-07-06 · +10dVerified

Show 2 more filings ↓up to 11d gap

Washington State AGbd_deb2f2346ecff13a2018-07-06 · +10dVerified
Montana State AGbd_9d32b8f4df8a3ccf2018-07-05 · +11dCandidate

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org
Industry: Otherllm

Discovered: Apr 11, 2018
Materiality determined: —
Notification sent: Jul 6, 2018
Affected individuals: 7,783state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to law enforcement and is cooperating with their investigation
Initial access: valid_credentials

During the incident: Terminated the unauthorized access
Implemented measures to secure our network
Launched a thorough investigation, with the help of leading independent data forensics experts
Reported the incident to law enforcement and is cooperating with their investigation
Changes made: Implementing new security technologies around our most sensitive systems and data
Improving our ability to detect and respond to external attacks to our data network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(96 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGJul 5 · first

California State AG+1d

New Hampshire State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

Washington State AG+1d

South Carolina State AG+11d · this page

Pattern: first filing Jul 5 (MT), last Jul 16 (SC) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/InternationalMissionBoard.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2018
Raw hash: dd50fe65e5cce8c74b9327cf01c3473c5bbee17d5bf178897808a9976926b948

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityInternational Mission Board

Victim entityInternational Mission Board

Incidentdiscovered Apr 11, 2018

Stated responseTerminated the unauthorized access

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov