PhysicalProfessional ServicesProfessional ServicesTheftOpportunisticIdentity (basic)Government IDMediumContained

Treloar & Heisel

bd_798c30d22e49db66 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 29, 2019

Filed

Jan 9, 2020

To disclose

10 weeks

Affected

37state residents only

Confidence

66%

Full breach record for Treloar & Heisel →3 incidents on file

Treloar & Heisel, Inc. notified Montana residents that a laptop containing personal information was stolen from an employee's car in May 2019. The company determined on October 29, 2019, that information may have been accessible. Data potentially exposed included names and government IDs. The company reset passwords and offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 181 days

discovery → filing · 10 weeks / 72 days

May 1, 2019

Begins

Oct 29, 2019

Discovered

Jan 9, 2020

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed37 affectedView incident

Name: Treloar & Heisel
norm: treloar heisel
Domain: treloaronline.com

Name: Treloar & Heisel
norm: treloar heisel
Domain: treloaronline.com
Industry: Professional Servicesllm

Discovered: Oct 29, 2019
Breach occurred: May 1, 2019
Undetected for: 181 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 9, 2020
Affected individuals: 37state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Began an investigation to confirm the security of the laptop and to determine the nature and scope of the event
Changed the employee’s password to email and other cloud-based storage systems
Reviewed materials that might have been saved locally to identify any potential personal information
Offering a complimentary two-year membership of Experian’s IdentityWorks
Changes made: Taking additional actions to enhance the security policies and procedures utilized by our employees regarding storage of data and laptop usage
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(72 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-95.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2020
Raw hash: fcde626b17aafd5e805d11425d2491adfd0e0e2890a40e61ba2664963b65b6ab

Reporting entityTreloar & Heisel

Victim entityTreloar & Heisel

Incidentdiscovered Oct 29, 2019

Stated responseBegan an investigation to confirm the security of the laptop and to determine the nature and scope of the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov