Social EngineeringTelecom & MediaInformationPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Cincinnati Bell, Inc. (Barnes Dennig & Co., Ltd.)

bd_74e68627dde6e2af · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2019

Filed

Jun 18, 2019

To disclose

10 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Cincinnati Bell, Inc. (Barnes Dennig & Co., Ltd.) →

Cincinnati Bell, Inc. notified Montana AG that an unauthorized individual accessed an employee email account via phishing, exposing names and SSNs of 401(k) plan participants. The company reset credentials, disabled access, and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 68 days

Apr 11, 2019

Discovered

Jun 18, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Cincinnati Bell, Inc. (Barnes Dennig & Co., Ltd.)
norm: cincinnati bell inc barnes dennig

Name: Cincinnati Bell, Inc. (Barnes Dennig & Co., Ltd.)
norm: cincinnati bell inc barnes dennig
Industry: Telecom & Mediallm

Discovered: Apr 11, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Arranged for you to receive a complimentary one-year membership of Experian’s IdentityWorks
Employee changed the email account password
Disabled the account’s web access to its email system
Changes made: Require that our vendors implement appropriate training and security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(68 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Cincinnati-Bell-Inc.-Barnes-Dennig-Co.-Ltd.-Consumer-Notification.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2019
Raw hash: 6755ba66dc43d0b90a023b1ac661831b546a93cb51727d802f69d9ec1c87cab0

Reporting entityCincinnati Bell, Inc. (Barnes Dennig & Co., Ltd.)

Victim entityCincinnati Bell, Inc. (Barnes Dennig & Co., Ltd.)

Incidentdiscovered Apr 11, 2019

Stated responseArranged for you to receive a complimentary one-year membership of Experian’s IdentityWorks

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov