MisuseProfessional ServicesProfessional ServicesPrivilege AbuseEmployee Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumResolved

Matrix Absence Management, Inc.

bd_7c7c9e8ae6070650 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 20, 2020

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Matrix Absence Management, Inc. →

Matrix Absence Management notified Montana AG of a data breach involving current and former employees. Human error led to unauthorized access of one employee's internal emails containing PII (name, address, DOB, SSN) and bank account info. No client data involved. Company offered PrivacyArmor identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 20, 2020

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_5ccdedd07c3426d72020-03-24 · +4dVerified
Indiana State AGbd_c67848ec36ab96582020-03-24 · +4dVerified

Name: Matrix Absence Management, Inc.
norm: matrix absence management
Domain: matrixcos.com

Name: Matrix Absence Management, Inc.
norm: matrix absence management
Domain: matrixcos.com
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Mar 20, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Initial access: insider_action

During the incident: Purchased PrivacyArmor protection for all employees
Offered PrivacyArmor service at no charge to employees and immediate family
Included $1 million identity theft insurance policy
Changes made: Underscores importance of ongoing security training and vigilance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMar 20 · first · this page

Massachusetts State AG+4d

Indiana State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/doc-29.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2020
Raw hash: df524c83e4364dfb114179ee66d88468da341d76c825a1afca7bb53f7a8f7155

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMatrix Absence Management, Inc.

Victim entityMatrix Absence Management, Inc.

IncidentInsider

Stated responsePurchased PrivacyArmor protection for all employees

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov