HackingTechnologyInformationDelayed DiscoveryAuthenticationCredentialsIdentity (basic)MediumActive

TrueFire

bd_930247ef651db3dc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 28, 2020

Filed

Oct 27, 2020

To disclose

13 weeks

Affected

2,633state residents only

Linked

4 filings

Confidence

70%

Full breach record for TrueFire →3 incidents on file

TrueFire, LLC notified Washington AG of unauthorized network access occurring on or about Feb 21, 2020, discovered July 28, 2020. 2,633 WA residents affected. Data included names, addresses, DOBs, usernames, and hashed passwords. Third-party forensic specialists engaged. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d13 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 158 days

discovery → filing · 13 weeks / 91 days

Feb 21, 2020

Begins

Jul 28, 2020

Discovered

Oct 27, 2020

Filed

vs. sector median

+2 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Oregon State AGbd_38e8bc783e8cc2a92020-10-27Candidate
Maine State AGbd_568560d2f06b1f8c2020-10-27Verified
California State AGbd_cf77833ecb4ff8152020-10-27Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: TrueFire
norm: truefire
Domain: truefirestudios.com
Industry: Technologyllm

Discovered: Jul 28, 2020
Breach occurred: Feb 21, 2020 – Jul 28, 2020
Undetected for: 158 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 27, 2020
Affected individuals: 2,633state-resident count only
Data types: AuthenticationCredentialsIdentity (basic)
Data elements: NameDate of birthUsername + password
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 100-199dexposure 100-199d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reporting this matter to regulators as required

During the incident: Began an investigation, with the assistance of third-party forensic specialists
Conducted a comprehensive review of information potentially impacted
Provided written notice of this incident to affected individuals
Providing individuals whose personal information was potentially affected by this incident with access to credit monitoring services for 1 year through TransUnion at no cost to the individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Reporting this matter to regulators as required
Changes made: Working to implement additional safeguards
Reviewing our existing policies and procedures related to network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Oregon State AGOct 27 · first

Maine State AGOct 27 · first

California State AGOct 27 · first

Washington State AGOct 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10349.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2020
Raw hash: 17dd954f04e5612188bee5cdf7ccb17a9b591cb73f975c3ec21609f5521e08b8

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityTrueFire

Incidentdiscovered Jul 28, 2020

Stated responseBegan an investigation, with the assistance of third-party forensic specialists

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com