HackingFinancial ServicesFinanceStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Petersen International Underwriters

bd_709db379e6930db8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 20, 2021

Filed

Jul 6, 2022

To disclose

28 weeks

Affected

16state residents only

Linked

6 filings

Confidence

66%

Full breach record for Petersen International Underwriters →

Petersen International Underwriters notified Montana and other state residents of a data security incident discovered on December 20, 2021. An unauthorized actor accessed systems containing producers' names, SSNs, and financial account numbers. The company engaged forensic experts, secured systems, and offered IDX identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 weeks / 198 days

Dec 20, 2021

Discovered

Jul 6, 2022

Filed

vs. sector median

+19 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_24a09469175a95dc2022-07-06Candidate
Indiana State AGbd_738411166d87abce2022-07-06Verified
California State AGbd_94e7f906558bc4cd2022-07-06Verified
Massachusetts State AGbd_de6367e474854da82022-07-13 · +7dVerified

Show 1 more filing ↓up to 71d gap

New Hampshire State AGbd_a4641bbf5861ae8a2022-09-15 · +71dVerified

Name: Petersen International Underwriters
norm: petersen international underwriters
Domain: piu.org

Name: Petersen International Underwriters
norm: petersen international underwriters
Domain: piu.org
Industry: Financial Servicesllm

Discovered: Dec 20, 2021
Materiality determined: —
Notification sent: Jul 6, 2022
Affected individuals: 16state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took the impacted systems offline
Took steps to secure our network
Engaged independent computer forensic experts to assist with our investigation
Offering identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(198 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGJul 6 · first

Indiana State AGJul 6 · first

California State AGJul 6 · first

Montana State AGJul 6 · first · this page

Massachusetts State AG+7d

New Hampshire State AG+71d

Pattern: first filing Jul 6 (ME), last Sep 15 (NH) — a 71-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-379.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2022
Raw hash: 87264b4b48ce2a0f2ae059db1ad5af34768e779f6d13348d233959fa33c071b0

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPetersen International Underwriters

Victim entityPetersen International Underwriters

Incidentdiscovered Dec 20, 2021

Stated responseTook the impacted systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov