HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Geocomp Corporation

bd_591f8f97d6c21708 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 28, 2021

Filed

Dec 22, 2021

To disclose

12 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for Geocomp Corporation →

Geocomp Corporation notified Montana residents of a data breach where an unknown actor accessed systems between Sept 24-28, 2021. The incident exposed names and Social Security numbers. Geocomp reset passwords, notified law enforcement, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 12 weeks / 85 days

Sep 24, 2021

Begins

Sep 28, 2021

Discovered

Dec 22, 2021

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_287f1b48c89c4cb02021-12-22Candidate
Massachusetts State AGbd_7290a9ec8921ae762021-12-22Verified
New Hampshire State AGbd_9120e1070fcf69952021-12-27 · +5dVerified

Name: Geocomp Corporation
norm: geocomp

Name: Geocomp Corporation
norm: geocomp
Industry: Technologyllm

Discovered: Sep 28, 2021
Breach occurred: Sep 24, 2021 – Sep 28, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 5, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: reporting this incident to state regulators
Initial access: valid_credentials

During the incident: Moved quickly to notify law enforcement
Assess the security of our systems
Reset passwords
Notify potentially impacted individuals
Reporting this incident to state regulators
Changes made: Reviewing and enhancing existing policies and procedures
Adding additional data security measures
Offering you access to 24 months of complimentary credit monitoring services through TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGDec 22 · first

Massachusetts State AGDec 22 · first

Montana State AGDec 22 · first · this page

New Hampshire State AG+5d

Pattern: first filing Dec 22 (ME), last Dec 27 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Geocomp-Consumer-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2021
Raw hash: f806bbd14b4f9d9033c1bc55f6aeca2b084a02bac396e573db117f37a7c87fb0

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGeocomp Corporation

Victim entityGeocomp Corporation

Incidentdiscovered Sep 28, 2021

Stated responseMoved quickly to notify law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov