Steele Compliance
bd_509ef5e5c81e5d82 · schema v1 · pii pii-v1
Diligent Corporation notified Montana residents that Steele Compliance, a subsidiary acquired in Feb 2021, suffered unauthorized network access starting May 21, 2022. Diligent detected the breach on May 23, 2022, and contained it by May 24. Later, files posted by the attacker revealed additional personal data was accessed. Diligent engaged outside experts, enhanced security controls, and offered 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 21, 2022
Begins
May 23, 2022
Discovered
Feb 2, 2023
Filed
vs. sector median
+18 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- California State AGbd_19c6f4b4f66d6c5b2023-02-01 · +1dVerified
- Indiana State AGbd_0ad07b89873351802022-06-22 · +225dVerified
- Massachusetts State AGbd_1fd2b1bba4b5c0932022-06-22 · +225dVerified
- Maine State AGbd_88c0545996ab44f52022-06-22 · +225dCandidate
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jun 22 (IN), last Feb 2 (MT) — a 225-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.