HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Constar Financial Services, LLC

bd_53ad2776970efdd6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 22, 2024

Filed

Sep 27, 2024

To disclose

10 weeks

Affected

14state residents only

Linked

4 filings

Confidence

66%

Full breach record for Constar Financial Services, LLC →2 incidents on file

Constar Financial Services notified Montana residents of a data breach involving a third-party partner's systems. Discovered July 22, 2024, the incident exposed names and government IDs. Constar engaged forensic specialists, reported to law enforcement, and offers credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 67 days

Jul 22, 2024

Discovered

Sep 27, 2024

Filed

vs. sector median

+1 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_89bae39d6e7498f82024-09-27Verified
New Hampshire State AGbd_c922d491a63096342024-09-27Verified
Maine State AGbd_d4bd802f24cc40d02024-09-27Verified

Name: Constar Financial Services, LLC
norm: constar financial

Name: Constar Financial Services, LLC
norm: constar financial
Industry: Financial Servicesllm

Discovered: Jul 22, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 14state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Regulator citations: reported the event to federal law enforcementreported this event to federal law enforcement and government regulators
Initial access: trusted_relationship

During the incident: Partner promptly took steps to secure the systems
Launched an investigation with the assistance of cyber incident response specialists
Promptly reported the event to federal law enforcement
Conducted a comprehensive review of the information within the impacted files
Immediately took steps to secure our systems
Conducted an investigation to confirm the nature and scope of the activity
Reported this event to federal law enforcement and government regulators
Offering you months of credit monitoring and identity restoration services at no cost to you through Equifax
Changes made: Working to review and further enhance these protections as part of our ongoing commitment to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGSep 27 · first

New Hampshire State AGSep 27 · first

Maine State AGSep 27 · first

Montana State AGSep 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1714.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2024
Raw hash: dccc900d63f9e72ceb12617b5740a16f313316f55a8645dc5825bd2121c2ce6f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityConstar Financial Services, LLC

Victim entityConstar Financial Services, LLC

Incidentdiscovered Jul 22, 2024

Stated responsePartner promptly took steps to secure the systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov