HackingOtherStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDHealth (basic)MediumContained

International Mission Board

bd_9d32b8f4df8a3ccf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2018

Filed

Jul 5, 2018

To disclose

12 weeks

Affected

189state residents only

Linked

7 filings

Confidence

66%

Full breach record for International Mission Board →

International Mission Board notified Montana residents of a data breach discovered on April 11, 2018. An unknown criminal actor accessed a data file containing personal information (name, SSN, DOB, health info) of applicants/staff. IMB terminated access, engaged forensic experts, notified law enforcement, and offered 12 months of credit monitoring via ID Experts.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 85 days

Apr 11, 2018

Discovered

Jul 5, 2018

Filed

vs. sector median

+4 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_1e1369f1c0be557a2018-07-06 · +1dVerified
New Hampshire State AGbd_2e8a0c7eb3e6b2df2018-07-06 · +1dVerified
Massachusetts State AGbd_6a19fcd136c9f5c22018-07-06 · +1dVerified
Oregon State AGbd_a4f2be36b26874c22018-07-06 · +1dVerified

Show 2 more filings ↓up to 11d gap

Washington State AGbd_deb2f2346ecff13a2018-07-06 · +1dVerified
South Carolina State AGbd_4301755604d700af2018-07-16 · +11dVerified

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org
Industry: Otherllm

Discovered: Apr 11, 2018
Materiality determined: —
Notification sent: Jul 6, 2018
Affected individuals: 189state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to law enforcement and is cooperating with their investigation
Initial access: valid_credentials

During the incident: Terminated the unauthorized access
Implemented measures to secure our network
Launched a thorough investigation with the help of leading independent data forensics experts
Reported the incident to law enforcement and is cooperating with their investigation
Offering identity theft protection services through ID Experts
Changes made: Implementing new security technologies around our most sensitive systems and data
Improving our ability to detect and respond to external attacks to our data network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGJul 5 · first · this page

California State AG+1d

New Hampshire State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

Washington State AG+1d

South Carolina State AG+11d

Pattern: first filing Jul 5 (MT), last Jul 16 (SC) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/International-Mission-Board.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2018
Raw hash: e23540d70b37d72e983eaec6f348c615b13236d79c9a3a022c165b8e7ff37b1e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityInternational Mission Board

Victim entityInternational Mission Board

Incidentdiscovered Apr 11, 2018

Stated responseTerminated the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov