MalwareRetail & ConsumerManufacturingRetailRansomwareTargetedData ExfiltratedIdentity (basic)Financial accountLowActive

Block and Company (MMF Industries) (2)

bd_8c607db492f7f1fb · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 1, 2016

Filed

May 13, 2016

To disclose

10 weeks

Affected · nationwide

41 in this filing

Confidence

66%

Full breach record for Block and Company (MMF Industries) (2) →2 incidents on file

Block and Company, Inc. notified Montana AG of a cyber incident affecting 4 residents. Malicious code (malware) was placed on web servers starting approx Feb 9, 2016, discovered March 1, 2016. Data included names, addresses, emails, and credit card info. Dell SecureWorks engaged; FBI notified. WAF/IPS installed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 21 days

discovery → filing · 10 weeks / 73 days

Feb 9, 2016

Begins

Mar 1, 2016

Discovered

May 13, 2016

Filed

vs. sector median

+2 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Block and Company (MMF Industries) (2)
norm: block and company mmf industries 2
Domain: blockandcompany.com

Name: Block and Company (MMF Industries) (2)
norm: block and company mmf industries 2
Domain: blockandcompany.com
Industry: Retail & ConsumerllmManufacturingllm

Discovered: Mar 1, 2016
Breach occurred: Feb 9, 2016
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 31, 2016
Affected individuals: 4state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of InvestigationNotified Montana Department of Justice Office of Consumer Protection
Initial access: exploit_public_facing

During the incident: Launched an internal investigation
Engaged Dell SecureWorks, a premier cybersecurity firm, to assist in its containment and remediation efforts as well as to conduct a forensic investigation
Notified the Federal Bureau of Investigation, and is cooperating in that investigation
Changes made: Installation of a Website Application Firewall/Intrusion Prevention System (WAF/IPS) that proactively mitigates attacks against the websites
Websites are also scanned several times a day using technology that is capable of identifying any Indicator of Compromise (IoC)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Block-and-Company-MMF-Industries-2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2016
Raw hash: 6b3d5b759d0c89890b67069f526a63bc7a85a72f184df5bbefc95d4616d299b7

Reporting entityBlock and Company (MMF Industries) (2)

Victim entityBlock and Company (MMF Industries) (2)

Incidentdiscovered Mar 1, 2016

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov