HackingProfessional ServicesProfessional ServicesPhishingStolen CredentialsDelayed DiscoveryCustomer Data InvolvedAuthenticationFinancial accountHealth (basic)Identity (basic)Government IDPHIMediumContained

Elevated Title, LLC

bd_7735ad5f81b99ea6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 18, 2020

Filed

Oct 14, 2021

To disclose

47 weeks

Affected

685state residents only

Linked

7 filings

Confidence

71%

Full breach record for Elevated Title, LLC →

Elevated Title, LLC reported a phishing incident where unauthorized individuals accessed email accounts from July 21 to December 19, 2020. The breach impacted 685 Washington residents, exposing PII, SSNs, financial data, and health info. Notices were sent on October 14, 2021.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d47 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 120 days

discovery → filing · 47 weeks / 330 days

Jul 21, 2020

Begins

Nov 18, 2020

Discovered

Oct 14, 2021

Filed

vs. sector median

+28 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_3f1c3de0a9b316552021-10-14Verified
California State AGbd_481e4cf9ae52f1452021-10-14Candidate
Maine State AGbd_5522d2130c9a43402021-10-14Verified
Massachusetts State AGbd_72a4c59d5d4017ff2021-10-14Verified

Show 2 more filings ↓up to 4d gap

Montana State AGbd_e6a4bda7d8ce24c02021-10-14Verified
New Hampshire State AGbd_4dcb43fc68d353772021-10-18 · +4dVerified

Name: Elevated Title, LLC
norm: elevated title

Name: Elevated Title, LLC
norm: elevated title
Industry: Professional Servicesllm

Discovered: Nov 18, 2020
Breach occurred: Jul 21, 2020 – Dec 19, 2020
Undetected for: 120 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 14, 2021
Affected individuals: 685state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Authentication
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthMilitary ID numberPassport numberHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 100-199dexposure 100-199d
WA-stated discovery: Found while ongoing
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Began an investigation
Began a thorough review of the full contents of the email accounts
Assessed the security of Elevated’s email system
Providing access to credit monitoring services for one (1) year through IDX to Washington residents
Changes made: Reviewing and enhancing existing policies and procedures
Conducting additional workforce training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(330 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGOct 14 · first

California State AGOct 14 · first

Maine State AGOct 14 · first

Massachusetts State AGOct 14 · first

Montana State AGOct 14 · first

Washington State AGOct 14 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA2136.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2021
Raw hash: 0c497aa7ae5f7e96371476aed259829f7d28ab35f85dcc0bd5c9f87eca198395

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityElevated Title, LLC

Victim entityElevated Title, LLC

Incidentdiscovered Nov 18, 2020

Stated responseBegan an investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com