HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDPHIHealth (basic)MediumContained

Marker Group, Inc.

bd_52356dbcd4633264 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 3, 2021

Filed

Dec 30, 2021

To disclose

17 weeks

Affected

Not disclosed

Linked

12 filings

Confidence

64%

Full breach record for Marker Group, Inc. →

The Marker Group Inc. discovered suspicious activity on its network on September 3, 2021. An investigation determined that an unauthorized third party may have accessed files containing names, dates of birth, Social Security numbers, and medical records between September 3 and September 10, 2021. The company secured its environment, engaged forensic specialists, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 118 days

Sep 3, 2021

Begins

Sep 3, 2021

Discovered

Dec 30, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maine State AGbd_0b9042c305fcc9d52021-12-30Candidate
Indiana State AGbd_7056145a4261d3052021-12-30Verified
Montana State AGbd_716781090f874bbe2021-12-30Verified
Illinois State AGbd_3143ae1f2e5576522022-01-01 · +2dVerified

Show 6 more filings ↓up to 109d gap

Illinois State AGbd_4c1b8883bbd09cea2022-01-01 · +2dVerified
New Hampshire State AGbd_a744ac0b943b8a352022-01-04 · +5dVerified
Oregon State AGbd_29259ef9d63a013c2022-03-14 · +74dVerified
South Carolina State AGbd_510c4941c72aecbb2022-03-14 · +74dVerified
Washington State AGbd_94028bba389de0a02022-03-14 · +74dVerified
New Hampshire State AGbd_eca708da06ae323c2022-04-18 · +109dVerified

Showing first 10 of 11 linked disclosures.

Name: Marker Group, Inc.
norm: marker group

Name: Marker Group, Inc.
norm: marker group
Industry: Professional Servicesllm

Discovered: Sep 3, 2021
Breach occurred: Sep 3, 2021 – Sep 10, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Immediately worked to secure our environment
Launched an investigation with the assistance of third-party computer specialists
Reviewed existing security policies
Implemented additional measures to further protect against similar incidents
Notifying potentially impacted individuals
Arranged for online credit monitoring service (myTrueIdentity) provided by TransUnion Interactive
Changes made: Reviewed existing security policies
Implemented additional measures to further protect against similar incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(118 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Maine State AGDec 30 · first

Indiana State AGDec 30 · first

Montana State AGDec 30 · first

California State AGDec 30 · first · this page

Illinois State AG+2d

New Hampshire State AG+5d

Oregon State AG+74d

South Carolina State AG+74d

Washington State AG+74d

New Hampshire State AG+109d

Pattern: first filing Dec 30 (ME), last Apr 18 (NH) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-549011
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2021
Raw hash: c6ce55a0e95a68e261ad41f2f5533c9a1a9f828639eacc9beae76275ae34c227

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityMarker Group, Inc.

Victim entityMarker Group, Inc.

Incidentdiscovered Sep 3, 2021

Stated responseImmediately worked to secure our environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov