HackingTelecom & MediaInformationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

California-Oregon Telecommunications Company

bd_563a729c0c57bd26 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 5, 2022

Filed

Apr 4, 2023

To disclose

39 weeks

Affected

1state residents only

Linked

3 filings

Confidence

64%

Full breach record for California-Oregon Telecommunications Company →

Cal-Ore Telecommunications Company notified Montana residents of unauthorized network access between June 16 and July 5, 2022. The company discovered the incident on July 5, 2022, engaged forensic specialists, and notified law enforcement. Personal information, including names, was potentially accessed. No evidence of misuse was found. Credit monitoring services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 19 days

discovery → filing · 39 weeks / 273 days

Jun 16, 2022

Begins

Jul 5, 2022

Discovered

Apr 4, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehivebd_82eb63ef1fba455c2022-09-06 · +209dCandidate

Regulatory filings (1) · sorted by filing gap

California State AGbd_8c95589053e23e722023-04-04Verified by operator

Name: California-Oregon Telecommunications Company
norm: california oregon telecommunications

Name: California-Oregon Telecommunications Company
norm: california oregon telecommunications
Industry: Telecom & Mediallm

Discovered: Jul 5, 2022
Breach occurred: Jun 16, 2022 – Jul 5, 2022
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 30, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: notified law enforcement
Initial access: valid_credentials

During the incident: Began an investigation, aided by third-party forensic specialists
Notified law enforcement
Worked to secure the Cal-Ore network
Conducted a comprehensive review of these files with the assistance of third party data specialists
Reviewing and enhancing our existing policies and procedures related to data privacy
Providing you with access to twelve (12)/twenty-four (24) months of credit monitoring and identity protection services through Equifax at no cost
Changes made: Reviewing and enhancing our existing policies and procedures related to data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(273 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGApr 4 · first

Montana State AGApr 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-832.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 4, 2023
Raw hash: 24d66073824f1245b1748759bba8245649f1233980b8f9e07af6fdd1402df1bf

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityCalifornia-Oregon Telecommunications Company

Victim entityCalifornia-Oregon Telecommunications Company

Incidentdiscovered Jul 5, 2022

Stated responseBegan an investigation, aided by third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov