HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

WESTERN UNION FINANCIAL SERVICES, INC.

bd_a4dfa4d88a61c551 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 20, 2016

To disclose

—

Affected · nationwide

172169 in this filing

Linked

5 filings

Confidence

68%

Full breach record for WESTERN UNION FINANCIAL SERVICES, INC. →2 incidents on file

Western Union Financial Services, Inc. notified the Montana AG that PII of ~172 residents may have been accessed in July 2016 via a vendor-supplied external storage system. Western Union cooperated with law enforcement, notified affected individuals, and offered credit monitoring. No fraud was known.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Dec 20, 2016

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_0a57b3336e4226e32016-12-20Verified
Massachusetts State AGbd_8f47d111e2382a992016-12-20Verified
Washington State AGbd_a1964b361ebe667a2016-12-20Candidate
Oregon State AGbd_99664afabdc078002016-12-27 · +7dVerified

Name: WESTERN UNION FINANCIAL SERVICES, INC.
norm: western union financial

Name: WESTERN UNION FINANCIAL SERVICES, INC.
norm: western union financial
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 172state + nationwide
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Montana Attorney General
Initial access: trusted_relationship

During the incident: Promptly informed federal law enforcement
Actively cooperating with law enforcement’s investigation
Conducted investigation to analyze the data on the external storage system
Providing individualized notification to each Montana resident
Offering complimentary one-year membership in Experian’s ProtectMyID product
Changes made: External system is no longer in use
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGDec 20 · first

Massachusetts State AGDec 20 · first

Washington State AGDec 20 · first

Montana State AGDec 20 · first · this page

Oregon State AG+7d

Pattern: first filing Dec 20 (CA), last Dec 27 (OR) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Western-Union.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 20, 2016
Raw hash: b61ca5c14f5c9de95925a8a1d21d0543ff7ccea6ae0682f440c7924c7d1df04e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWESTERN UNION FINANCIAL SERVICES, INC.

Victim entityWESTERN UNION FINANCIAL SERVICES, INC.

IncidentThird-Party / Supply Chain

Stated responsePromptly informed federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov