HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedPIIIdentity (basic)LowContained

Disability Help Group, LLC

bd_43b093e0c883bd1c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 16, 2022

Filed

Nov 18, 2022

To disclose

22 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for Disability Help Group, LLC →

Disability Help Group, LLC notified Montana residents of a data security incident discovered on June 16, 2022. An unknown actor gained unauthorized access to the network on June 13, 2022. The incident involved personal information. The company engaged cybersecurity experts, reported the incident to the FBI, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 22 weeks / 155 days

Jun 13, 2022

Begins

Jun 16, 2022

Discovered

Nov 18, 2022

Filed

vs. sector median

+3 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_cb57c84d798b0c4d2022-11-18Verified
Massachusetts State AGbd_1e9d4f1a0936e8cf2022-11-19 · +1dVerified
Maine State AGbd_587e2baeb4976a262022-11-19 · +1dCandidate
New Hampshire State AGbd_a71f310cc4e6ac8a2022-11-21 · +3dVerified

Name: Disability Help Group, LLC
norm: disability help

Name: Disability Help Group, LLC
norm: disability help
Industry: Professional Servicesllm

Discovered: Jun 16, 2022
Breach occurred: Jun 13, 2022
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 18, 2022
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged cybersecurity experts to assist with an investigation
Reported the incident to the Federal Bureau of Investigation
Offering complimentary credit monitoring and identity protection services for 12/24 months through IDX
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(155 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGNov 18 · first

Montana State AGNov 18 · first · this page

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 18, 2022
Raw hash: bf763224c51535dec30eaf93e2c3b956a0b7cbf6d4cf77fe66f7952a27f46a3a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDisability Help Group, LLC

Victim entityDisability Help Group, LLC

Incidentdiscovered Jun 16, 2022

Stated responseEngaged cybersecurity experts to assist with an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov