MalwareOtherRansomwareData ExfiltratedData EncryptedIdentity (basic)Government IDMediumContained

Calvary Albuquerque, Inc.

bd_4ce070b64d34c1a4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 10, 2022

Filed

Jan 12, 2023

To disclose

44 weeks

Affected

3state residents only

Confidence

66%

Calvary Albuquerque, Inc. notified Montana residents of a March 10, 2022 ransomware attack. The incident involved network shutdown, investigation, and engagement of outside IT experts. PII including names, SSNs, passport numbers, and tax IDs may have been accessed or exfiltrated. The network was rebuilt and restored. Affected individuals were offered credit monitoring and identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 44 weeks / 308 days

Mar 10, 2022

Begins

Mar 10, 2022

Discovered

Jan 12, 2023

Filed

vs. sector median

+36 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Calvary Church Osuna
norm: calvary church osuna

Name: Calvary Albuquerque, Inc.
norm: calvary albuquerque
Industry: Otherllm

Discovered: Mar 10, 2022
Breach occurred: Mar 10, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 12, 2023
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Shut down our network
Launched an investigation
Engaged and worked with a group of outside IT solution experts
Offering credit monitoring
Changes made: Rebuild, restore, and upgrade the security of our network
Enhancing our administrative and technical security protocols
Network upgrades
Multi factor authentication
Data encryption
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(308 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-797.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 12, 2023
Raw hash: 60bc8c64f668abec01d3ce603e9bc4d56a3b4606102669639f90ae90ee36ad16

Reporting entityCalvary Church Osuna

Victim entityCalvary Albuquerque, Inc.

Incidentdiscovered Mar 10, 2022

Stated responseShut down our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov