Social EngineeringHealthcareTechnologyHealthcarePhishingStolen CredentialsCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDFinancial accountMediumContained

Eiger Biopharmaceuticals

bd_5162124262d4a913 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 13, 2021

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Eiger Biopharmaceuticals →

Eiger Biopharmaceuticals notified Montana residents of a security incident involving unauthorized access to an employee's email account between Feb 15 and Mar 31, 2021. Exposed data included names, addresses, SSNs, and financial account info. The incident was financially motivated. Eiger engaged forensic investigators, reset passwords, implemented MFA, and offered one year of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 15, 2021

Begins

Aug 13, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_f30a9238d1c9c7282021-08-13Verified

Name: Eiger Biopharmaceuticals
norm: eiger biopharmaceuticals

Name: Eiger Biopharmaceuticals
norm: eiger biopharmaceuticals
Industry: HealthcarellmTechnologyllm

Discovered: —
Breach occurred: Feb 15, 2021 – Mar 31, 2021
Materiality determined: —
Notification sent: Apr 1, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement and will cooperate with their investigation
Initial access: phishing_link

During the incident: Initiating an internal investigation into this incident
Retaining an independent forensic investigation firm to assist us in our investigation of and response to this incident
Resetting account passwords
Implementing multi-factor authentication
Notified law enforcement and will cooperate with their investigation
Changes made: Implementing multi-factor authentication to help prevent this type of incident from reoccurring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGAug 13 · first

Montana State AGAug 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-45.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2021
Raw hash: 93f338abf77f77e95654a1d1866107e8e21a6036debbd6dd1ded5658cdb7b754

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEiger Biopharmaceuticals

Victim entityEiger Biopharmaceuticals

IncidentPhishing

Stated responseInitiating an internal investigation into this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov