HackingTechnologyProfessional ServicesInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountCredentialsHealth (basic)MediumContained

Wurkforce, Inc.

bd_921460ad57981f4c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2020

Filed

Aug 3, 2020

To disclose

25 weeks

Affected

3state residents only

Linked

7 filings

Confidence

65%

Full breach record for Wurkforce, Inc. →

Wurkforce, Inc. notified Montana residents of a data breach where unauthorized access to employee email accounts occurred between Nov 22, 2019 and Feb 12, 2020. The company discovered the activity on Feb 11, 2020. Personal information including SSNs, driver's licenses, and financial data was potentially accessed. Wurkforce engaged forensic investigators, notified law enforcement, enhanced email security, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 81 days

discovery → filing · 25 weeks / 174 days

Nov 22, 2019

Begins

Feb 11, 2020

Discovered

Aug 3, 2020

Filed

vs. sector median

+14 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_18f0dff354c8b3842020-08-03Verified
Oregon State AGbd_3a96e56e76927b842020-08-03Candidate
Washington State AGbd_5304feaf854097762020-08-03Verified
Indiana State AGbd_7e0d5e2688fff7222020-08-03Verified

Show 2 more filings ↓

Massachusetts State AGbd_98a758c17a0664372020-08-03Verified
New Hampshire State AGbd_9ebd1e3626d41f482020-08-03Verified

Name: Wurkforce, Inc.
norm: wurkforce

Name: Wurkforce, Inc.
norm: wurkforce
Industry: TechnologyllmProfessional Servicesllm

Discovered: Feb 11, 2020
Breach occurred: Nov 22, 2019 – Feb 12, 2020
Undetected for: 81 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2020
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentialsHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Took steps to secure all Wurk email accounts
Launched an investigation
Engaged an independent digital forensics firm
Notified law enforcement
Took steps to enhance the security of its email system
Offered complimentary MyIDCare services through ID Experts
Changes made: Enhanced the security of its email system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(174 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGAug 3 · first

Oregon State AGAug 3 · first

Washington State AGAug 3 · first

Indiana State AGAug 3 · first

Massachusetts State AGAug 3 · first

New Hampshire State AGAug 3 · first

Montana State AGAug 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Wurkforce-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2020
Raw hash: ac4f588a373f9500115d31f52bc5e3ebf550184096df064bc28d3fa3b0149565

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWurkforce, Inc.

Victim entityWurkforce, Inc.

Incidentdiscovered Feb 11, 2020

Stated responseTook steps to secure all Wurk email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov