Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Insurance Recovery Group

bd_67dd4fccf8b751fe · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 2, 2020

Filed

Feb 20, 2020

To disclose

7 weeks

Affected

4state residents only

Linked

3 filings

Confidence

66%

Full breach record for Insurance Recovery Group →

Insurance Recovery Group notified Montana residents of a data breach discovered on January 2, 2020, involving suspicious activity in its email system. The incident potentially exposed names, addresses, SSNs, DOBs, and driver's license numbers. The company engaged forensic investigators, notified the FBI, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 49 days

Jan 2, 2020

Discovered

Feb 20, 2020

Filed

vs. sector median

1 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_efb2396b0d5cdd4e2020-02-19 · +1dVerified
Indiana State AGbd_f79ed91d8ec54d192020-02-18 · +2dVerified

Name: Insurance Recovery Group
norm: insurance recovery

Name: Insurance Recovery Group
norm: insurance recovery
Industry: Financial Servicesllm

Discovered: Jan 2, 2020
Materiality determined: —
Notification sent: Feb 18, 2020
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the Federal Bureau of Investigation
Initial access: phishing_link

During the incident: Engaged a digital forensics firm
Reported the incident to the Federal Bureau of Investigation
Changes made: Offering complimentary credit monitoring for one year through ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGFeb 18 · first

Massachusetts State AG+1d

Montana State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-CON3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2020
Raw hash: 9e056d4751c25b7072d58b13416c6aa523de435cec66be18f2ae90bc9b42ff82

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityInsurance Recovery Group

Victim entityInsurance Recovery Group

Incidentdiscovered Jan 2, 2020

Stated responseEngaged a digital forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov