Social EngineeringTechnologyProfessional ServicesInformationPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)MediumContained

Calista Corporation

bd_5555904f0ec9411f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 9, 2018

Filed

Jun 6, 2019

To disclose

26 weeks

Affected

16state residents only

Confidence

66%

Full breach record for Calista Corporation →2 incidents on file

Calista Corporation notified Montana residents of a phishing attack in December 2018 that compromised an employee's email credentials. The incident exposed personal information including SSNs, driver's license numbers, health insurance info, passport numbers, and financial data. Calista secured the account, engaged forensic investigators, and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 26 weeks / 179 days

Dec 9, 2018

Begins

Dec 9, 2018

Discovered

Jun 6, 2019

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16 affectedView incident

Name: Calista Corporation
norm: calista

Name: Calista Corporation
norm: calista
Industry: TechnologyllmProfessional Servicesllm

Discovered: Dec 9, 2018
Breach occurred: Dec 9, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 16state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Secured the employee’s email account
Engaged a leading forensic investigation firm
Undertook a comprehensive review of the emails and attachments
Offering a complimentary one-year membership of Experian’s IdentityWorks
Changes made: Providing additional training to our employees regarding phishing emails and other cybersecurity issues
Enhancing existing security measures related to our email system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(179 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-Regulatory-Letter-dated-June-7-2019-Helena-Montana.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2019
Raw hash: 51b1c6376f392f3c7b864a1791f4e4340c728ba79088af6e1d14d53d4720d9e2

Reporting entityCalista Corporation

Victim entityCalista Corporation

Incidentdiscovered Dec 9, 2018

Stated responseSecured the employee’s email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov