HackingOtherDelayed DiscoveryIdentity (basic)LowContained

The Southwestern Family of Companies

bd_5b95ba7eff72a203 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 17, 2021

Filed

Aug 1, 2022

To disclose

37 weeks

Affected

14state residents only

Linked

5 filings

Confidence

67%

Full breach record for The Southwestern Family of Companies →

The Southwestern Family of Companies discovered suspicious activity on Nov 17, 2021, impacting system operability. An unknown actor potentially accessed files containing names. The company reset passwords, engaged forensic specialists, and offered credit monitoring. Notification was sent to residents in multiple states including Montana.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 37 weeks / 257 days

Nov 17, 2021

Discovered

Aug 1, 2022

Filed

vs. sector median

+29 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_a11a949a9ea3d32d2022-08-01Verified
Massachusetts State AGbd_c0b8ebca289e37fd2022-08-01Verified
Indiana State AGbd_f367c8b94cde79d72022-08-01Verified
New Hampshire State AGbd_e2bcbc3d7340aa632022-08-04 · +3dVerified

Name: The Southwestern Family of Companies
norm: the southwestern family of companies

Name: The Southwestern Family of Companies
norm: the southwestern family of companies
Industry: Otherllm

Discovered: Nov 17, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 14state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Southwestern is notifying relevant state and federal regulators, if required

During the incident: Resetting relevant account passwords
Reviewing the contents of the impacted systems to determine whether they contained personal information
Reviewing internal systems to identify contact information for purposes of providing notice to potentially affected individuals
Offering you access to complimentary credit monitoring and identity protection services for <<CM Length>> months through Equifax
Changes made: Reviewing existing policies and procedures to reduce the likelihood of a similar future incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(257 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGAug 1 · first

Massachusetts State AGAug 1 · first

Indiana State AGAug 1 · first

Montana State AGAug 1 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-455.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2022
Raw hash: 9766de930ca662d06143f685a0162189ddf43ee77380cfd16287ba7dd5c3041b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Southwestern Family of Companies

Victim entityThe Southwestern Family of Companies

Incidentdiscovered Nov 17, 2021

Stated responseResetting relevant account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov