UnknownOtherCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIMedium

Summit Consolidated Group

bd_88ebacaf2a697f60 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 5, 2023

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

68%

Full breach record for Summit Consolidated Group →

Summit Consolidated Group issued a consumer notification regarding a cybersecurity incident affecting personal information, including SSNs, DOBs, and financial data. The company provided 12 months of credit monitoring via TransUnion and fraud alert guidance. The incident affects residents in Montana and Rhode Island.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 5, 2023

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_acf450308968d82f2023-07-05Candidate
New Hampshire State AGbd_17f1f28c4b8949a72023-07-10 · +5dVerified

Name: Summit Consolidated Group
norm: summit consolidated

Name: Summit Consolidated Group
norm: summit consolidated
Industry: Otherllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHI
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Arranged for complimentary 12-month credit monitoring service through TransUnion
Established a dedicated toll-free response line for affected individuals
Provided instructions for placing fraud alerts on credit files
Provided instructions for placing security freezes on credit files
Changes made: Continually evaluate and modify practices and internal controls to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGJul 5 · first

Montana State AGJul 5 · first · this page

New Hampshire State AG+5d

Pattern: first filing Jul 5 (ME), last Jul 10 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-397.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2023
Raw hash: 19c7ef441bd03a8dfec51ee1be87c2d67dc507c5a839cec4aadfda3de9b79c4a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySummit Consolidated Group

Victim entitySummit Consolidated Group

IncidentUnknown

Stated responseArranged for complimentary 12-month credit monitoring service through TransUnion

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov