Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Georgetown Financial Group

bd_7113f068babf834a · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 1, 2023

Filed

Sep 20, 2023

To disclose

33 weeks

Affected

1state residents only

Linked

6 filings

Confidence

65%

Full breach record for Georgetown Financial Group →2 incidents on file

Georgetown Financial Group notified clients of an email account compromise involving a single employee. Unauthorized access occurred between Jan 30 and Feb 1, 2023. Personal information (name) was present in the accessed account. GFG secured the account, investigated, and offered credit monitoring. Notification sent Sept 20, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 33 weeks / 231 days

Jan 30, 2023

Begins

Feb 1, 2023

Discovered

Sep 20, 2023

Filed

vs. sector median

+25 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_5e20de845b90b1372023-09-20Verified
Maine State AGbd_c65c90fd157dd2bc2023-09-20Candidate
Massachusetts State AGbd_38b5b98993a453502023-08-11 · +40dVerified
Maine State AGbd_86957beedc88dd922023-08-11 · +40dCandidate

Show 1 more filing ↓up to 40d gap

Indiana State AGbd_9ec59a3f8c6d36562023-08-11 · +40dVerified

Name: Georgetown Financial Group
norm: georgetown financial

Name: Georgetown Financial Group
norm: georgetown financial
Industry: Financial Servicesllm

Discovered: Feb 1, 2023
Breach occurred: Jan 30, 2023 – Feb 1, 2023
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 20, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took steps to immediately secure the account
Began an investigation into the activity
Reviewed the account for sensitive information
Providing notices as information becomes available
Reviewed and enhanced existing policies and procedures
Offering complimentary credit monitoring and identity protection services
Changes made: Reviewed and enhanced existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(231 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Massachusetts State AGAug 11 · first

Maine State AGAug 11 · first

Indiana State AGAug 11 · first

New Hampshire State AG+40d

Maine State AG+40d

Montana State AG+40d · this page

Pattern: first filing Aug 11 (MA), last Sep 20 (MT) — a 40-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-698.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 20, 2023
Raw hash: cd1db7c36a2374cb8e8e16b3cf5cbeca35ceaf580f820bc3ece72c673a23d1a9

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityGeorgetown Financial Group

Victim entityGeorgetown Financial Group

Incidentdiscovered Feb 1, 2023

Stated responseTook steps to immediately secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov