HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedMulti-Stage ChainIdentity (basic)PIILowContained

Eurasia Group

bd_6d40290418610339 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 20, 2023

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Eurasia Group →2 incidents on file

Eurasia Group notified affected individuals in January 2023 of unauthorized access to email systems via sophisticated intrusion. Information involved included names and other PII. No evidence of misuse was found. The company engaged forensic specialists, secured systems, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jan 20, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_0b6310eaacf2671f2023-01-20Verified
Massachusetts State AGbd_0e88810c5c7e73352023-01-20Verified
Maine State AGbd_863b454b5344ad8e2023-01-20Verified

Name: Eurasia Group
norm: eurasia group

Name: Eurasia Group
norm: eurasia group
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jan 20, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation, with the assistance of third-party computer forensic specialists
Took steps to secure our systems
Reviewing our policies, procedures, and processes related to storage of and access to personal information
Providing you with access to credit monitoring and identity protection services through IDX
Changes made: Reviewing our policies, procedures, and processes related to storage of and access to personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJan 20 · first

Massachusetts State AGJan 20 · first

Maine State AGJan 20 · first

Montana State AGJan 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-43.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 20, 2023
Raw hash: 4351ab7ad7509cbf9958e8df28b6cae0e30ae4fc541e05f411b9d0f9bae441e4

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityEurasia Group

Victim entityEurasia Group

IncidentUnauthorized Access

Stated responseLaunched an investigation, with the assistance of third-party computer forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov