MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedTargetedFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Marker Group, Inc.

bd_94028bba389de0a0 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 3, 2021

Filed

Mar 14, 2022

To disclose

27 weeks

Affected

1,493state residents only

Linked

12 filings

Confidence

71%

Full breach record for Marker Group, Inc. →

Marker Group Inc. filed a supplemental notice with the Washington AG regarding a ransomware incident discovered on September 3, 2021. The breach affected 1,493 Washington residents, exposing names, SSNs, DOBs, and medical records. Marker engaged third-party specialists, contained the breach, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d27 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 27 weeks / 192 days

Sep 3, 2021

Begins

Sep 3, 2021

Discovered

Mar 14, 2022

Filed

vs. sector median

+9 wks slower

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_29259ef9d63a013c2022-03-14Verified
South Carolina State AGbd_510c4941c72aecbb2022-03-14Verified
New Hampshire State AGbd_eca708da06ae323c2022-04-18 · +35dVerified
New Hampshire State AGbd_a744ac0b943b8a352022-01-04 · +69dVerified

Show 6 more filings ↓up to 74d gap

Illinois State AGbd_3143ae1f2e5576522022-01-01 · +72dVerified
Illinois State AGbd_4c1b8883bbd09cea2022-01-01 · +72dVerified
Maine State AGbd_0b9042c305fcc9d52021-12-30 · +74dCandidate
California State AGbd_52356dbcd46332642021-12-30 · +74dVerified
Indiana State AGbd_7056145a4261d3052021-12-30 · +74dVerified
Montana State AGbd_716781090f874bbe2021-12-30 · +74dVerified

Showing first 10 of 11 linked disclosures.

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Marker Group, Inc.
norm: marker group
Industry: Professional Servicesllm

Discovered: Sep 3, 2021
Breach occurred: Sep 3, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 14, 2022
Affected individuals: 1,493state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: NameSocial Security numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notifying regulators as required
Initial access: valid_credentials

During the incident: Worked to secure its environment
With the assistance of third-party computer specialists, launched an investigation
Began a lengthy and thorough review of the folders and its internal files and systems
Notified all individuals that could be identified as being potentially impacted at the time
Posted notice of the incident on its website
Issued a nationwide press release
Continued to diligently review the information and reconcile the impacted information with its internal records
Implemented additional safeguards to strengthen its security
Providing individuals whose personal information was potentially affected by this incident with access to credit monitoring services for 12 months through TransUnion at no cost to the individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implemented additional safeguards to strengthen its security
Reviewing our existing security policies and have implemented additional measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(192 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Maine State AGDec 30 · first

California State AGDec 30 · first

Indiana State AGDec 30 · first

Montana State AGDec 30 · first

Illinois State AG+2d

New Hampshire State AG+5d

Oregon State AG+74d

South Carolina State AG+74d

Washington State AG+74d · this page

New Hampshire State AG+109d

Pattern: first filing Dec 30 (ME), last Apr 18 (NH) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA5374.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2022
Raw hash: 3f6ccecc10e30141f8eb6e668c859c69e348618e534ae10c71e5ea241b5654cd

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityMarker Group, Inc.

Incidentdiscovered Sep 3, 2021

Stated responseWorked to secure its environment

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com