Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Ottawa Kent Insurance Agency

bd_7c05f70978850d12 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 4, 2019

Filed

Jun 5, 2020

To disclose

31 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Ottawa Kent Insurance Agency →

Ottawa Kent Insurance Agency notified Montana residents of a security incident where an email account was accessed without authorization on November 4, 2019. The intruder used the account to send spam. The breach exposed full names and Social Security numbers. The agency forced a password change, engaged outside cybersecurity professionals, and offered one year of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 31 weeks / 214 days

Nov 4, 2019

Begins

Nov 4, 2019

Discovered

Jun 5, 2020

Filed

vs. sector median

+21 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_7d112899097ce5512020-06-03 · +2dVerified
New Hampshire State AGbd_c210847a9fc8e02b2020-06-15 · +10dVerified
Massachusetts State AGbd_9818da40f66b1e312020-06-22 · +17dVerified

Name: Ottawa Kent Insurance Agency
norm: ottawa kent insurance agency
Domain: ottawakent.com

Name: Ottawa Kent Insurance Agency
norm: ottawa kent insurance agency
Domain: ottawakent.com
Industry: Financial Servicesllm

Discovered: Nov 4, 2019
Breach occurred: Nov 4, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Terminated the unauthorized access by forcing a password change
Launched an investigation to analyze the extent of any compromise
Worked with outside cybersecurity professionals
Changes made: Offered a one-year membership in myTrueIdentity provided by TransUnion Interactive
Continually evaluate and modify practices and internal controls to enhance the security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(214 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJun 3 · first

Montana State AG+2d · this page

New Hampshire State AG+12d

Massachusetts State AG+19d

Pattern: first filing Jun 3 (IN), last Jun 22 (MA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-100.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2020
Raw hash: ccef25bb0dea784ad2e67ed0f30651b7c87ee25fe52c5bade4ed0a8427c94307

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityOttawa Kent Insurance Agency

Victim entityOttawa Kent Insurance Agency

Incidentdiscovered Nov 4, 2019

Stated responseTerminated the unauthorized access by forcing a password change

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov