Social EngineeringProfessional ServicesProfessional ServicesPhishingTargetedIdentity (basic)Government IDFinancial accountMediumContained

Deaf Services Unlimited

bd_67f58a291495df8a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 24, 2020

Filed

Feb 4, 2020

To disclose

11 days

Affected

3state residents only

Linked

2 filings

Confidence

65%

Full breach record for Deaf Services Unlimited →

Deaf Services Unlimited notified Montana residents of a phishing incident occurring Jan 13-24, 2020. The breach compromised names, addresses, SSNs, and bank account information. Notices were sent on Feb 3, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

discovery → filing · 11 days

Jan 13, 2020

Begins

Jan 24, 2020

Discovered

Feb 4, 2020

Filed

vs. sector median

17 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_92327ea83b87f47b2020-02-04Verified

Name: Deaf Services Unlimited
norm: deaf services unlimited
Domain: deafservicesunlimited.com

Name: Deaf Services Unlimited
norm: deaf services unlimited
Domain: deafservicesunlimited.com
Industry: Professional Servicesllm

Discovered: Jan 24, 2020
Breach occurred: Jan 13, 2020 – Jan 24, 2020
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 3, 2020
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Montana Attorney General
Initial access: phishing_link

During the incident: Sent notification letters to affected individuals
Recommended placing a fraud alert on credit files
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 4 · first

Montana State AGFeb 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/AG-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 4, 2020
Raw hash: fe05398363fb3289f8801f236a17ad194d1ea02eeae68a30b7e1f66ff2dd3a2c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityDeaf Services Unlimited

Victim entityDeaf Services Unlimited

Incidentdiscovered Jan 24, 2020

Stated responseSent notification letters to affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov