MalwareTechnologyInformationRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

List Industries

bd_7bc2045052c86bee · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 2, 2020

To disclose

—

Affected

3state residents only

Linked

2 filings

Confidence

65%

Full breach record for List Industries →

List Industries experienced a malware attack on April 12, 2020, resulting in unauthorized access and acquisition of personal information, including names, addresses, and Social Security Numbers. The company engaged third-party experts for forensic investigation and remediation, deployed enterprise-wide endpoint monitoring, and implemented additional security safeguards. Affected individuals were offered one year of free credit monitoring and identity restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 12, 2020

Begins

Jun 2, 2020

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_7175090a4e38dfc32020-05-29 · +4dVerified

Name: List Industries
norm: list industries
Domain: listindustries.com

Name: List Industries
norm: list industries
Domain: listindustries.com
Industry: Technologyllm

Discovered: —
Breach occurred: Apr 12, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Engaged third party experts to assist with remediation efforts and perform a forensic investigation
Deploying an enterprise-wide endpoint monitoring solution to detect any continued presence of the threat actors in our systems
Implementing additional safeguards to bolster data security on our systems and mitigate risk
Arranged for one year of free credit monitoring and identity restoration services through myTrueIdentity from TransUnion
Changes made: Deploying an enterprise-wide endpoint monitoring solution to detect any continued presence of the threat actors in our systems
Implementing additional safeguards to bolster data security on our systems and mitigate risk
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMay 29 · first

South Carolina State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/ListIndustries.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2020
Raw hash: edb9347b7a7bc19466c2cc63fc01ab073c7ac1c4e4df5a873cfb67006aebe1e0

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityList Industries

Victim entityList Industries

IncidentUnknown

Stated responseEngaged third party experts to assist with remediation efforts and perform a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov