MalwareFinancial ServicesFinanceRansomwareData EncryptedData ExfiltratedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Schwarz Partners, L.P.

bd_9e52a6c45f68b23d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2021

Filed

Jul 19, 2021

To disclose

22 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for Schwarz Partners, L.P. →2 incidents on file

Schwarz Partners, L.P. notified Montana employees of a ransomware incident discovered on Feb 12, 2021. Attackers encrypted servers and exfiltrated data which was subsequently destroyed. Exposed data included PII, SSNs, financial info, and medical records. Schwarz engaged forensic investigators, enhanced security, and provided 12 months of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 weeks / 157 days

Feb 12, 2021

Discovered

Jul 19, 2021

Filed

vs. sector median

+14 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_cbddf13cc6c398df2021-07-19Verified
New Hampshire State AGbd_084680e0a5daf0332021-07-22 · +3dVerified
Indiana State AGbd_e911a8ccdcd8870b2021-07-08 · +11dVerified
Illinois State AGbd_3bcb7074a87de2732021-01-01 · +199dCandidate

Name: Schwarz Partners, L.P.
norm: schwarz partners

Name: Schwarz Partners, L.P.
norm: schwarz partners
Industry: Financial Servicesllm

Discovered: Feb 12, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Engaged cyber counsel
Engaged a specialized cybersecurity firm to conduct a forensic investigation
Recovered access to its files
Enhanced security of its computer systems and servers
Provided 12 months of complimentary identity monitoring services through Kroll
Changes made: Enhanced security of its computer systems and servers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(157 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+188d

Massachusetts State AG+199d

Montana State AG+199d · this page

New Hampshire State AG+202d

Pattern: first filing Jan 1 (IL), last Jul 22 (NH) — a 202-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-99.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 19, 2021
Raw hash: ced25b8aca244653009ec4d8f750883389827cd7a6312bd39afc5bb819fedde2

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySchwarz Partners, L.P.

Victim entitySchwarz Partners, L.P.

Incidentdiscovered Feb 12, 2021

Stated responseEngaged cyber counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov