MalwareFinancial ServicesFinanceRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountMediumContained

UFCW Local 655 Food Employers Pension Plan

bd_50ec984949acceea · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 14, 2016

Filed

Nov 9, 2016

To disclose

17 weeks

Affected

556state residents only

Linked

6 filings

Confidence

70%

Full breach record for UFCW Local 655 Food Employers Pension Plan →

UFCW Local 655 Food Employers Joint Pension Plan notified Washington AG of a ransomware attack occurring July 14-21, 2016. Unauthorized access to a server was confirmed on July 14. No evidence of data acquisition was found, but names, SSNs, DOBs, and bank info were potentially exposed for 556 WA residents. Notices sent Nov 9, 2016. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 118 days

Jul 14, 2016

Begins

Jul 14, 2016

Discovered

Nov 9, 2016

Filed

vs. sector median

+9 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_01d8a838089cfbf52016-11-09Candidate
California State AGbd_219edff0f57142f72016-11-09Verified
Massachusetts State AGbd_3cb6dfa50884b1c82016-11-09Verified
New Hampshire State AGbd_69c7c4c80ba0ab9b2016-11-09Verified

Show 1 more filing ↓

Oregon State AGbd_70ce4bca427f95062016-11-09Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: UFCW Local 655 Food Employers Pension Plan
norm: ufcw local 655 food employers pension plan
Industry: Financial Servicesllm

Discovered: Jul 14, 2016
Breach occurred: Jul 14, 2016 – Jul 21, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 9, 2016
Affected individuals: 556state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Date of birthFinancial account numberSocial Security numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Provided notice to the Office of the Attorney General, Olympia, WA
Initial access: valid_credentials

During the incident: Retained a third-party data forensic firm to assist in the investigation
Mailing written notice of this incident to these 556 Washington residents
Providing notice of this incident to other regulators and consumer reporting agencies where required
Changes made: Updating its security procedures
Securing its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(118 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGNov 9 · first

California State AGNov 9 · first

Massachusetts State AGNov 9 · first

New Hampshire State AGNov 9 · first

Oregon State AGNov 9 · first

Washington State AGNov 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9652.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2016
Raw hash: d2e735a54305ee0357238ad56abd73cdcb186127569a5d7258cac86bb217c01b

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityUFCW Local 655 Food Employers Pension Plan

Incidentdiscovered Jul 14, 2016

Stated responseRetained a third-party data forensic firm to assist in the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com