Social EngineeringTechnologyInformationPhishingBECData ExfiltratedRansom DemandedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Electronic Warfare Associates (EWA)

bd_59b4977a736da668 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 2, 2021

Filed

Nov 4, 2021

To disclose

13 weeks

Affected

1state residents only

Confidence

64%

Full breach record for Electronic Warfare Associates (EWA) →2 incidents on file

Electronic Warfare Associates, Inc. notified Montana authorities of a phishing incident on August 2, 2021, where a threat actor infiltrated email accounts to attempt wire fraud. The actor exfiltrated files containing names, SSNs, and driver's license numbers. EWA engaged forensic investigators and offered two years of Equifax identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 94 days

Aug 2, 2021

Begins

Aug 2, 2021

Discovered

Nov 4, 2021

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Electronic Warfare Associates (EWA)
norm: electronic warfare associates ewa

Name: Electronic Warfare Associates (EWA)
norm: electronic warfare associates ewa
Industry: Technologyllm

Discovered: Aug 2, 2021
Breach occurred: Aug 2, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 4, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Investigated this matter thoroughly with the help of outside counsel and an experienced third-party forensics firm immediately upon discovery of the suspicious wire fraud activity
Offering free fraud detection and identity theft protection through Equifax’s Complete Premier services at no charge for two years
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(94 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Data-Breach-Notification-25.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 4, 2021
Raw hash: d58acb210ac716af3943c129981ae505b7a9b659020c0f8d74b34a006fb1fee2

Reporting entityElectronic Warfare Associates (EWA)

Victim entityElectronic Warfare Associates (EWA)

Incidentdiscovered Aug 2, 2021

Stated responseInvestigated this matter thoroughly with the help of outside counsel and an experienced third-party forensics firm immediately upon discovery of the suspicious wire fraud activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov