HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDPIIMediumContained

Idea Financial

bd_73da40adbe58df93 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 14, 2023

To disclose

—

Affected

97state residents only

Linked

7 filings

Confidence

66%

Idea Financial notified Montana residents of a security incident where an unauthorized party accessed a database containing PII (names, DOB, SSN, FICO scores) between April 26 and May 24, 2023. The incident was contained and investigated forensically. Affected individuals were offered identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 26, 2023

Begins

Jul 14, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_12c2addfd2709e8c2023-07-14Verified
Vermont State AGbd_666219c04d04e2822023-07-14Verified
California State AGbd_c94fed9c9d01f27b2023-07-14Candidate
Maine State AGbd_ec6996fa5c60e1f92023-07-14Verified

Show 2 more filings ↓up to 7d gap

Washington State AGbd_fd11744cacd3e96f2023-07-14Verified
Massachusetts State AGbd_b1765738dff414022023-07-21 · +7dVerified

Name: Idea 247 Inc.
norm: idea 247

Name: Idea Financial
norm: idea financial
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Apr 26, 2023 – May 24, 2023
Materiality determined: —
Notification sent: Jul 14, 2023
Affected individuals: 97state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Contained the incident
Commenced a prompt and thorough investigation
Conducted an extensive forensic investigation
Offering identity theft protection services through IDX
Offering credit and CyberScan monitoring
Offering a $1,000,000 insurance reimbursement policy
Offering fully managed id theft recovery services
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGJul 14 · first

Vermont State AGJul 14 · first

California State AGJul 14 · first

Maine State AGJul 14 · first

Washington State AGJul 14 · first

Montana State AGJul 14 · first · this page

Massachusetts State AG+7d

Pattern: first filing Jul 14 (IN), last Jul 21 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-430.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 14, 2023
Raw hash: bb084591248c019b33b581d918d05d5cc72df40e6cafe480bfce3553953b440c

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityIdea 247 Inc.

Victim entityIdea Financial

IncidentUnauthorized Access

Stated responseContained the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov