MalwareManufacturingManufacturingRansomwareData EncryptedTargetedIdentity (basic)Government IDHealth (basic)PIIMediumContained

CentiMark Corporation

bd_5aab9959235eab5b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 11, 2022

Filed

Dec 2, 2022

To disclose

16 weeks

Affected

5state residents only

Linked

5 filings

Confidence

65%

Full breach record for CentiMark Corporation →

CentiMark, a commercial roofing company, notified Montana and other state regulators of a ransomware incident discovered on August 11, 2022. Unauthorized access occurred between August 7-11, 2022. Potential exposure includes names, DOB, SSN, driver's license, and medical/insurance info. No evidence of misuse found. CentiMark engaged forensic investigators, secured networks, and implemented MFA and password policy changes.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 16 weeks / 113 days

Aug 7, 2022

Begins

Aug 11, 2022

Discovered

Dec 2, 2022

Filed

vs. sector median

+5 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_456eb2c76260731d2022-12-02Verified
Maine State AGbd_6db6c41cefddb2c92022-12-02Verified
New Hampshire State AGbd_2c1cbdcb0f9d40052022-12-05 · +3dVerified
Massachusetts State AGbd_0c1bfc25cbe8f8152022-12-09 · +7dVerified

Name: CentiMark Corporation
norm: centimark

Name: CentiMark Corporation
norm: centimark
Industry: Manufacturingllm

Discovered: Aug 11, 2022
Breach occurred: Aug 7, 2022 – Aug 11, 2022
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 2, 2022
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: providing notice of this incident to appropriate state regulators
Initial access: valid_credentials

During the incident: Launched an investigation to determine the nature and scope of the unauthorized activity with the assistance of a nationally recognized digital forensics firm
Worked quickly to secure our network
Searched Dark Web sources
Changes made: Increasing password complexity requirements and the frequency of password changes
Adding multi-factor authentication for employee accounts
Reviewing and strengthening our policies and procedures regarding data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGDec 2 · first

Maine State AGDec 2 · first

Montana State AGDec 2 · first · this page

New Hampshire State AG+3d

Massachusetts State AG+7d

Pattern: first filing Dec 2 (IN), last Dec 9 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-755.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2022
Raw hash: a0d2cad51404f85333d3a065cf8eb2f52dd2e5df89f0d7dbb73d4e0ef6166391

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCentiMark Corporation

Victim entityCentiMark Corporation

Incidentdiscovered Aug 11, 2022

Stated responseLaunched an investigation to determine the nature and scope of the unauthorized activity with the assistance of a nationally recognized digital forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov