MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Jim Provencher

bd_4b4c361f29c3a5c5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 8, 2020

Filed

Aug 11, 2021

To disclose

48 weeks

Affected

Not disclosed

Confidence

63%

Full breach record for Jim Provencher →

Jim Provencher reported a ransomware incident on September 8, 2020, where a computer system was infected and data encrypted. The malware was contained, the system wiped, and data restored from backups. Affected data potentially included names, addresses, dates of birth, Social Security numbers, and financial account numbers. No evidence of data theft was found. The firm offered one year of identity monitoring through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 48 weeks / 337 days

Sep 8, 2020

Begins

Sep 8, 2020

Discovered

Aug 11, 2021

Filed

vs. sector median

+40 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Jim Provencher
norm: jim provencher

Name: Jim Provencher
norm: jim provencher
Industry: Financial Servicesllm

Discovered: Sep 8, 2020
Breach occurred: Sep 8, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Date of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: IT consultant quickly identified and contained the malware
Wiped the affected computer system
Immediately restored from backups
Updating user passwords
Implementing additional security safeguards
Arranged to provide identity monitoring at no cost for one year through Kroll
Changes made: Updating user passwords
Implementing additional security safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(337 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-543825
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2021
Raw hash: 262b2b31cac7aa74dfd6f8351285b3462ce52762e295d90e2505ff1bf7578e66

Reporting entityJim Provencher

Victim entityJim Provencher

Incidentdiscovered Sep 8, 2020

Stated responseIT consultant quickly identified and contained the malware

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov