HackingProfessional ServicesProfessional ServicesStolen CredentialsPhishingEmployee Data InvolvedMulti-Stage ChainIdentity (basic)Government IDHealth (basic)CredentialsMediumContained

Walker Advertising, LLC

bd_7baacaae4f873b2d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 9, 2018

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Walker Advertising, LLC →2 incidents on file

Walker Advertising, LLC experienced a security incident between January 29 and February 22, 2018, where two senior employees' corporate email accounts were hacked. The attacker used these accounts to send phishing emails to solicit access credentials. Potentially compromised data includes names, Social Security numbers, driver's license numbers, medical information, and health insurance information. The company isolated accounts, locked out the hacker, reset credentials, enabled MFA, and offered one year of identity protection via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 29, 2018

Begins

Apr 9, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Walker Advertising, LLC
norm: walker advertising
Domain: walkeradvertising.com

Name: Walker Advertising, LLC
norm: walker advertising
Domain: walkeradvertising.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jan 29, 2018 – Feb 22, 2018
Materiality determined: —
Notification sent: Apr 9, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)Credentials
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Reported the unlawful activity to the Federal Bureau of Investigation (FBI)
Initial access: valid_credentials

During the incident: Isolated the affected e-mail accounts
Stopped the phishing e-mails
Locked out the hacker
Reported the unlawful activity to the Federal Bureau of Investigation (FBI)
Required a change to all users’ credentials with regard to accessing our system
Enabled a multi-factor authentication tool for individuals with access to this type of information
Offering one year of identity protection services at no cost through Experian
Changes made: Conducting a thorough review of its current policies and procedures
Evaluate what additional steps are needed to enhance the strong protections we already have in place for safeguarding personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-135102
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2018
Raw hash: d9da65a59c9ec8d556bbae019a33c66214540a4da0c49728c6a204e15b1cca23

Reporting entityWalker Advertising, LLC

Victim entityWalker Advertising, LLC

IncidentUnauthorized Access

Stated responseIsolated the affected e-mail accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov