MalwareTechnologyInformationRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

IBEX GLOBAL SOLUTIONS, INC.

bd_48d8c7a339015691 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 17, 2020

Filed

Aug 6, 2021

To disclose

51 weeks

Affected

891state residents only

Linked

9 filings

Confidence

69%

Full breach record for IBEX GLOBAL SOLUTIONS, INC. →

Ibex Global Solutions, Inc. notified the Washington Attorney General of a malware incident affecting 891 Washington residents. Unauthorized access occurred between July 27 and August 17, 2020. Affected data included names, addresses, SSNs, dates of birth, and medical information. Ibex took systems offline, engaged forensic specialists, reported to law enforcement, and provided 12 months of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d51 weeks discovery → filing

Incident timeline

undetected · 21 days

discovery → filing · 51 weeks / 354 days

Jul 27, 2020

Begins

Aug 17, 2020

Discovered

Aug 6, 2021

Filed

vs. sector median

+32 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_71cdba9e170c4cdd2021-08-06Verified
California State AGbd_b1fa14e4639e6b2d2021-08-06Verified
South Carolina State AGbd_bb2fd247d5bffb422021-08-06Verified
Oregon State AGbd_c39ef7cb45979a6e2021-08-06Verified

Show 4 more filings ↓up to 1d gap

Delaware State AGbd_c832140b7d57b6842021-08-06Verified
Montana State AGbd_da5e96b84dd8ac502021-08-06Verified
Maine State AGbd_fb0587e3708dc5e62021-08-06Verified
Massachusetts State AGbd_a5e537fa1bb7a5022021-08-07 · +1dVerified

Name: IBEX GLOBAL SOLUTIONS, INC.
norm: ibex global

Name: IBEX GLOBAL SOLUTIONS, INC.
norm: ibex global
Industry: Technologyllm

Discovered: Aug 17, 2020
Breach occurred: Jul 27, 2020 – Aug 17, 2020
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 6, 2021
Affected individuals: 891state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General

During the incident: Took these systems offline
Launched an investigation to determine the nature and scope of the incident
Engaged a third-party firm to review the potentially impacted files
Reported this incident to law enforcement and is cooperating with their investigation
Provided written notice of this incident to all affected individuals
Providing access to credit monitoring services for twelve (12) months, through Equifax
Changes made: Implemented additional cybersecurity measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(354 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Indiana State AGAug 6 · first

California State AGAug 6 · first

South Carolina State AGAug 6 · first

Oregon State AGAug 6 · first

Delaware State AGAug 6 · first

Montana State AGAug 6 · first

Maine State AGAug 6 · first

Washington State AGAug 6 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA68.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 6, 2021
Raw hash: bf26c1d97e5dfcded8d40252aaf045e67266839c79615d79411e2c2a3d15bb9c

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityIBEX GLOBAL SOLUTIONS, INC.

Victim entityIBEX GLOBAL SOLUTIONS, INC.

Incidentdiscovered Aug 17, 2020

Stated responseTook these systems offline

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com