HackingProfessional ServicesProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

Interstates

bd_8458b8e807e3f64d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 20, 2020

Filed

Jun 4, 2020

To disclose

6 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Interstates →

Interstates notified Montana employees of a breach involving third-party vendor Paperless Pay. Unauthorized access occurred on Feb 18, 2020, discovered April 20, 2020. Data included names, addresses, and SSNs. Interstates terminated the vendor, engaged Kroll for credit monitoring, and is reviewing security policies.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 62 days

discovery → filing · 6 weeks / 45 days

Feb 18, 2020

Begins

Apr 20, 2020

Discovered

Jun 4, 2020

Filed

vs. sector median

12 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_3d956c941f6e4a252020-06-04Verified

Name: Interstates
norm: interstates

Name: Interstates
norm: interstates
Industry: Professional Servicesllm

Discovered: Apr 20, 2020
Breach occurred: Feb 18, 2020
Undetected for: 62 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 20, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Third party: via Paperless Pay
Initial access: trusted_relationship

During the incident: Secured the services of Kroll to provide identity monitoring at no cost to you for one year
No longer utilizing the services of Paperless Pay
Seeking assurances that Paperless Pay is destroying any Interstates employee information from their systems
Working to review existing policies and procedures
Implementing additional safeguards to enhance the security of employee information
Changes made: Implementing additional safeguards to enhance the security of employee information in its possession
Reviewing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJun 4 · first

Montana State AGJun 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-181.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2020
Raw hash: 7a37d5497b7426d55a40e23684b0a13cd8f765a5bd6cac75f47b5ca530fbffaf

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityInterstates

Victim entityInterstates

Incidentdiscovered Apr 20, 2020

Stated responseSecured the services of Kroll to provide identity monitoring at no cost to you for one year

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov