HackingOtherStolen CredentialsTargetedIdentity (basic)Government IDFinancial accountCredentialsHealth (basic)MediumContained

Silversea Cruises Ltd.

bd_434779ee854e7f2f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 22, 2022

To disclose

—

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for Silversea Cruises Ltd. →

Silversea Cruises Ltd. notified Montana residents that unauthorized remote access to company systems occurred between August 18-25, 2021. The incident potentially exposed names, DOB, SSNs, financial account numbers, and health information. The incident was contained in August 2021, and 24 months of credit monitoring via Equifax was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 18, 2021

Begins

Apr 22, 2022

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_4f73afba637d12ff2022-04-22Verified
New Hampshire State AGbd_4cef6a5a4c27f7872022-04-25 · +3dVerified
Massachusetts State AGbd_e20409d0d5278de22022-04-25 · +3dVerified
Indiana State AGbd_f97b3f0d9065202d2022-04-27 · +5dVerified

Name: Silversea Cruises Ltd.
norm: silversea cruises

Name: Silversea Cruises Ltd.
norm: silversea cruises
Industry: Otherllm

Discovered: —
Breach occurred: Aug 18, 2021 – Aug 25, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentialsHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Implemented measures to contain the incident
Remove the third party access and secure our network
Began an investigation
Arranged resources to start identifying, informing, and assisting persons whose personal information may have been involved
Taken steps to strengthen the security and monitoring that protects our systems
Arranged for you to enroll, at no cost to you, in an online credit monitoring service for 24 months
Changes made: Continue to closely monitor and take further steps as appropriate to safeguard your personal data
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGApr 22 · first

Montana State AGApr 22 · first · this page

New Hampshire State AG+3d

Massachusetts State AG+3d

Indiana State AG+5d

Pattern: first filing Apr 22 (ME), last Apr 27 (IN) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-320.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2022
Raw hash: da536cebb655408e2f2bd8a05b023ed39f515b7becec159131cf51568e88a3fe

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySilversea Cruises Ltd.

Victim entitySilversea Cruises Ltd.

IncidentUnauthorized Access

Stated responseImplemented measures to contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov