Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Applied Data Finance, LLC

bd_62ac49021db76aa8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 9, 2018

Filed

Jan 31, 2019

To disclose

12 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Applied Data Finance, LLC →

Applied Data Finance, LLC (dba Personify Financial) notified Montana residents of a data breach where an unauthorized third party accessed employee email accounts via spear-phishing. The incident, discovered on November 9, 2018, exposed names, addresses, SSNs, and account numbers. The company disabled accounts, engaged forensic investigators, notified law enforcement, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 111 days

discovery → filing · 12 weeks / 83 days

Jul 21, 2018

Begins

Nov 9, 2018

Discovered

Jan 31, 2019

Filed

vs. sector median

+3 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_7ede26d75ea83f942019-02-01 · +1dVerified

Name: Applied Data Finance, LLC
norm: applied data finance

Name: Applied Data Finance, LLC
norm: applied data finance
Industry: Financial Servicesllm

Discovered: Nov 9, 2018
Breach occurred: Jul 21, 2018
Undetected for: 111 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 28, 2019
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported this security incident to federal law enforcementnotifying the appropriate state regulatory authorities
Initial access: phishing_link

During the incident: Disabled the affected employees’ business e-mail accounts
Strengthen the security of our e-mail systems
Working with a nationally recognized computer forensics investigation firm
Reported this security incident to federal law enforcement
Notifying the appropriate state regulatory authorities
Advised the three major consumer reporting agencies (Equifax, Experian, and TransUnion)
Changes made: Retained Epiq to help provide credit monitoring and identity theft restoration services
Arranged for enrollment in an online credit monitoring service (myTrueIdentity) for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGJan 31 · first · this page

California State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Applied-Data-Finance-LLC-dba-Personify-Financial-ADF.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2019
Raw hash: b77b47fe90da3b64f1e25981facc934642594093cb29dc1fb62c0d6825dcf183

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityApplied Data Finance, LLC

Victim entityApplied Data Finance, LLC

Incidentdiscovered Nov 9, 2018

Stated responseDisabled the affected employees’ business e-mail accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov