HackingOtherData ExfiltratedIdentity (basic)MediumContained

Milk Source, LLC

bd_8df1262132f4f8e7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 10, 2023

Filed

Aug 23, 2024

To disclose

45 weeks

Affected

45,527state residents only

Linked

5 filings

Confidence

64%

Full breach record for Milk Source, LLC →

Milk Source LLC notified Montana residents of a data security incident where an unauthorized actor accessed files containing personal information (name) between Oct 9-10, 2023. The company engaged cybersecurity experts, implemented additional security measures, and offered complimentary identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 45 weeks / 318 days

Oct 9, 2023

Begins

Oct 10, 2023

Discovered

Aug 23, 2024

Filed

vs. sector median

+38 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_cc8149426d8987c32023-10-20 · +307dVerified

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_643957d2431d92802024-08-23Verified
Maine State AGbd_babb8183ee614a492024-08-23Verified by operator
Vermont State AGbd_d498a0c31e7c25b22024-08-23Verified

Name: Milk Source, LLC
norm: milk source
Domain: milksource.com

Name: Milk Source, LLC
norm: milk source
Domain: milksource.com
Industry: Otherllm

Discovered: Oct 10, 2023
Breach occurred: Oct 9, 2023 – Oct 10, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Aug 12, 2024
Affected individuals: 45,527state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged cybersecurity experts to conduct an independent investigation and assist with our response
Offering you the opportunity to enroll in 12/24 months of complimentary identity protection services through IDX
Changes made: Implemented additional security measures to minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(318 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 23 · first

Maine State AGAug 23 · first

Vermont State AGAug 23 · first

Montana State AGAug 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1617.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2024
Raw hash: f59186c76986804d05904787e09e838ed80b9301cb7896000bbfa3baa4171926

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityMilk Source, LLC

Victim entityMilk Source, LLC

Incidentdiscovered Oct 10, 2023

Stated responseEngaged cybersecurity experts to conduct an independent investigation and assist with our response

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov