Social EngineeringProfessional ServicesProfessional ServicesPhishingBECCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

Frazier & Deeter, LLC

bd_9a1186c4afb8afd3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 13, 2020

Filed

Jan 5, 2021

To disclose

25 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Frazier & Deeter, LLC →2 incidents on file

Frazier & Deeter, LLC notified individuals of a business email compromise resulting from a phishing attack on an employee's account. The incident exposed names and SSNs of employees of limited client organizations. The firm secured the account, engaged forensic investigators, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 176 days

Jul 13, 2020

Begins

Jul 13, 2020

Discovered

Jan 5, 2021

Filed

vs. sector median

+6 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_cd118a83b56581c92021-01-05Verified

Name: Frazier & Deeter, LLC
norm: frazier deeter

Name: Frazier & Deeter, LLC
norm: frazier deeter
Industry: Professional Servicesllm

Discovered: Jul 13, 2020
Breach occurred: Jul 13, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Secured the user's account
Notified all recipients of the malicious email to stop its proliferation
Engaged Pillar Technology Partners to investigate the compromised inbox
Arranged for Epiq Corporate Services to provide identity monitoring services
Changes made: Taken steps to prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJan 5 · first

Montana State AGJan 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/frazSAmp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2021
Raw hash: 005c3f8c1c1d8f27eed09f360ccb0c194e97838cdaa6de4b20127ac23fe8e0d0

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFrazier & Deeter, LLC

Victim entityFrazier & Deeter, LLC

Incidentdiscovered Jul 13, 2020

Stated responseSecured the user's account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov