PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPIIMediumContained

Mountain State Financial Group, LLC

bd_56acef50963727f6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 26, 2021

Filed

May 25, 2021

To disclose

29 days

Affected

3state residents only

Confidence

66%

Full breach record for Mountain State Financial Group, LLC →

Mountain State Financial Group, LLC reported a physical theft of a hard drive containing borrower PII (SSN, driver's license, financial data) on April 26, 2021. The company changed passwords, improved physical security, and offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Apr 26, 2021

Begins

Apr 26, 2021

Discovered

May 25, 2021

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Mountain State Financial Group, LLC
norm: mountain state financial

Name: Mountain State Financial Group, LLC
norm: mountain state financial
Industry: Financial Servicesllm

Discovered: Apr 26, 2021
Breach occurred: Apr 26, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Filed a report with the police

During the incident: Changed all computer passwords
Added internal security cameras
Had all internal and external locks changed
Filed a report with the police
Secured the services of Kroll to provide identity monitoring
Changes made: Added internal security cameras
Had all internal and external locks changed to improve office security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Mountain-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 25, 2021
Raw hash: 3d1afeb6ef3657d788ee9f68edfcd6769c358e353c514aade1fa474e1e4ee4ab

Reporting entityMountain State Financial Group, LLC

Victim entityMountain State Financial Group, LLC

Incidentdiscovered Apr 26, 2021

Stated responseChanged all computer passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov