MalwareOtherRansomwareData EncryptedIdentity (basic)Government IDHealth (basic)PIIMediumContained

JA Carpentry

bd_6c7c2fedc6526b25 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 31, 2018

To disclose

—

Affected

1state residents only

Confidence

68%

Full breach record for JA Carpentry →

JA Carpentry, Inc. notified Montana residents of a ransomware attack over Memorial Day weekend that encrypted data and interrupted system access. While no data removal was confirmed, the scope of unauthorized access is undetermined. Compromised data may include names, SSNs, DOBs, addresses, payroll, health insurance, and driver's license numbers. Kroll provided one year of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 31, 2018

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: JA Carpentry
norm: ja carpentry

Name: JA Carpentry
norm: ja carpentry
Industry: Otherllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged an information security professional to conduct a thorough review of our systems
Restored data
Contracted with Kroll to provide identity monitoring and restoration services at no cost to you for one year
Changes made: Implementing additional administrative, technical, and procedural safeguards to mitigate against the risk and harm of future attacks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/JA-Carpentry.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2018
Raw hash: e6aebc52317fe0b4807aba57c588063883ed85ccca63a05d3c8a50cbfa4a246d

Reporting entityJA Carpentry

Victim entityJA Carpentry

IncidentRansomware

Stated responseEngaged an information security professional to conduct a thorough review of our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov