Social EngineeringTechnologyInformationPhishingStolen CredentialsTargetedData ExfiltratedPIIEmploymentGovernment IDMediumContained

Applications Software Technology LLC

bd_a0b299044cb249e6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 9, 2020

Filed

Apr 15, 2020

To disclose

5 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Applications Software Technology LLC →

Applications Software Technology, LLC notified Washington AG of a March 9, 2020 breach where an employee's email was compromised via phishing. Attackers diverted emails to access 2019 W-2 data. Affected employees were offered 12 months of LifeLock protection and advised to contact the IRS.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d5 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 5 weeks / 37 days

Mar 9, 2020

Begins

Mar 9, 2020

Discovered

Apr 15, 2020

Filed

vs. sector median

13 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

California State AGbd_bb4e794bfe5b7d9c2020-04-14 · +1dVerified
Delaware State AGbd_f88e55d5edb0de002020-04-14 · +1dVerified
Montana State AGbd_9fc486827fc9940e2020-03-16 · +30dVerified
Indiana State AGbd_e186ae4af42d37132020-03-16 · +30dVerified

Show 1 more filing ↓up to 105d gap

Illinois State AGbd_7dfd433adf595b502020-01-01 · +105dCandidate

Name: Applications Software Technology LLC
norm: applications software
Domain: astcorporation.com

Name: Applications Software Technology LLC
norm: applications software
Domain: astcorporation.com
Industry: Technologyllm

Discovered: Mar 9, 2020
Breach occurred: Mar 9, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 15, 2020
Affected individuals: Not disclosed
Data types: PIIEmploymentGovernment ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Filed a report with the IRS
Initial access: phishing_link

During the incident: Completed full scans of company systems to identify malware and other threats
Implemented two-factor authentication for HR, accounting, and executive team
Engaged an outside IT consultant, CORE BTS, to provide a full vulnerability assessment
Filed a report with the IRS
Provided LifeLock Defender Preferred identity theft prevention services for 12 months
Changes made: Rolling out two-factor authentication for all employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Montana State AG+75d

Indiana State AG+75d

California State AG+104d

Delaware State AG+104d

Washington State AG+105d · this page

Pattern: first filing Jan 1 (IL), last Apr 15 (WA) — a 105-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10543.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2020
Raw hash: 5b731d34a45e552a9566ec25b99b0d7b8760c68b2bf51b73bd6dd5a984fc8858

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityApplications Software Technology LLC

Victim entityApplications Software Technology LLC

Incidentdiscovered Mar 9, 2020

Stated responseCompleted full scans of company systems to identify malware and other threats

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com