HackingTechnologyInformationCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentPIIMediumContained

Tentamus Group GmbH

bd_6c5a5261e2119ef8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 13, 2023

Filed

Apr 11, 2023

To disclose

29 days

Affected

4state residents only

Confidence

66%

Full breach record for Tentamus Group GmbH →

Tentamus Group GmbH notified affected individuals of a cybersecurity attack on March 13, 2023, that exposed personal information of current and former employees. Data accessed included names, SSNs, DOBs, addresses, bank account numbers, and tax documents. The company engaged law enforcement, locked out unauthorized users, retained Kroll for forensic investigation, and provided 12 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Mar 13, 2023

Begins

Mar 13, 2023

Discovered

Apr 11, 2023

Filed

vs. sector median

14 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Tentamus Group GmbH
norm: tentamus group

Name: Tentamus Group GmbH
norm: tentamus group
Industry: Technologyllm

Discovered: Mar 13, 2023
Breach occurred: Mar 13, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial accountEmploymentPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notifying law enforcement
Initial access: exploit_public_facing

During the incident: Notifying law enforcement
Successfully locking out the unauthorized users from the Company’s system
Undertaking a full forensic investigation of the incident
Secured the services of Kroll to provide identity monitoring at no cost to you for 12 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-181.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 11, 2023
Raw hash: 18b4d36b22a2e923de70dcd44a15481c6f09455f3196bee7740863015e302d87

Reporting entityTentamus Group GmbH

Victim entityTentamus Group GmbH

Incidentdiscovered Mar 13, 2023

Stated responseNotifying law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov