Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedPIICredentialsLowContained

CUSO Financial Services, L.P.

bd_8aba4f336fb47f3a · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 26, 2020

Filed

May 7, 2020

To disclose

6 weeks

Affected

6state residents only

Linked

6 filings

Confidence

66%

CUSO Financial Services, L.P., a subsidiary of Atria Wealth Solutions, notified Montana residents of a phishing incident where an affiliate's employee email account was accessed without authorization on December 3, 2019. The breach exposed PII and credentials. CUSO engaged forensic specialists and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 114 days

discovery → filing · 6 weeks / 42 days

Dec 3, 2019

Begins

Mar 26, 2020

Discovered

May 7, 2020

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Washington State AGbd_43fb324aeece20652020-05-07Candidate
California State AGbd_4754d4123d7410ef2020-05-07Verified
Oregon State AGbd_653a0d7a323a455b2020-05-07Verified
Indiana State AGbd_ef46e538ccef29bf2020-05-07Verified

Show 1 more filing ↓up to 4d gap

New Hampshire State AGbd_45fed457f80cf4d92020-05-11 · +4dVerified

Name: CUSO Financial Services, L.P.
norm: cuso financial services

Name: CUSO Financial Services, L.P.
norm: cuso financial services
Industry: Financial Servicesllm

Discovered: Mar 26, 2020
Breach occurred: Dec 3, 2019
Undetected for: 114 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6state-resident count only
Data types: PIICredentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Launched an in-depth investigation
Engaged third-party computer forensics specialists
Implemented further security enhancements
Reviewed existing policies and procedures
Providing twelve (12) months of complimentary access to credit monitoring and identity restoration services through Experian
Changes made: Implemented further security enhancements
Reviewed existing policies and procedures to mitigate any risk associated with this incident and to better prevent future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGMay 7 · first

California State AGMay 7 · first

Oregon State AGMay 7 · first

Indiana State AGMay 7 · first

Montana State AGMay 7 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-86.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2020
Raw hash: 418e3a506af745a1df058c324e823cd1cd0757c6d108483bdb11e7c0f5351928

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCUSO Financial Services, L.P.

Victim entityCUSO Financial Services, L.P.

Incidentdiscovered Mar 26, 2020

Stated responseLaunched an in-depth investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov