Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Life Equity LLC

bd_695947765d727003 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 4, 2019

Filed

Mar 27, 2019

To disclose

12 weeks

Affected

2state residents only

Linked

2 filings

Confidence

65%

Full breach record for Life Equity LLC →

Life Equity LLC notified affected individuals that an employee email account was compromised via unauthorized access (likely phishing) between Nov 13, 2018 and Jan 16, 2019. The company detected unusual activity on Jan 4, 2019, reset credentials, and engaged forensic investigators. Names were exposed. The company offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 52 days

discovery → filing · 12 weeks / 82 days

Nov 13, 2018

Begins

Jan 4, 2019

Discovered

Mar 27, 2019

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_40fc23fec2ad07f12019-03-27Verified

Name: Life Equity LLC
norm: life equity

Name: Life Equity LLC
norm: life equity

Discovered: Jan 4, 2019
Breach occurred: Nov 13, 2018 – Jan 16, 2019
Undetected for: 52 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: providing notice to certain state regulators as required
Initial access: phishing_link

During the incident: Changed employee credentials
Launched an investigation with the assistance of a third-party forensic investigation firm
Changes made: Reviewing policies and procedures
Implemented additional safeguards
Implemented employee training
Offering complimentary access to 24 months of free credit monitoring and identity restoration services with TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(82 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMar 27 · first

Montana State AGMar 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-3.27.19-Montana-Regulator-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2019
Raw hash: 16dec464a79cc1bfec31ec969ebf378abd25998bb5d81191c2d09b184281b21c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLife Equity LLC

Victim entityLife Equity LLC

Incidentdiscovered Jan 4, 2019

Stated responseChanged employee credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov