HackingRetail & ConsumerRetailTargetedIdentity (basic)Government IDMediumContained

Wm. G. Roe & Sons, Inc.

bd_a4fba58900eb6cde · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 28, 2021

To disclose

—

Affected

1state residents only

Linked

7 filings

Confidence

67%

Full breach record for Wm. G. Roe & Sons, Inc. →

Wm. G. Roe & Sons, Inc. notified Montana residents of a security incident where a hacker accessed a data file containing employee names and Social Security numbers. The company engaged forensic investigators, whose findings were inconclusive regarding data theft. The company offered one year of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 28, 2021

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_31f056314018be1e2021-09-28Verified
Massachusetts State AGbd_6208f295b4bb06c82021-09-28Verified
Oregon State AGbd_8bd37935ef945af22021-09-28Candidate
Indiana State AGbd_9e870af2cb921fc42021-09-28Verified

Show 2 more filings ↓

Washington State AGbd_a3f027d7090b7e302021-09-28Verified
Maine State AGbd_a78cd2c6bcf2ae112021-09-28Verified

Name: Wm. G. Roe & Sons, Inc.
norm: wm g roe sons

Name: Wm. G. Roe & Sons, Inc.
norm: wm g roe sons
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: Dec 30, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Engaged a cybersecurity forensic firm to conduct an investigation
Engaged expert assistance to stop further unauthorized access to our systems
Accelerated our plan to install additional security measures across our environment
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Install additional security measures across our environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

New Hampshire State AGSep 28 · first

Massachusetts State AGSep 28 · first

Oregon State AGSep 28 · first

Indiana State AGSep 28 · first

Washington State AGSep 28 · first

Maine State AGSep 28 · first

Montana State AGSep 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Data-Breach-Notification-10.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2021
Raw hash: c7a3104cd5dd0e6c3caace94af40765ed1d2a7b5128951a1240684d70320f333

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWm. G. Roe & Sons, Inc.

Victim entityWm. G. Roe & Sons, Inc.

IncidentUnauthorized Access

Stated responseEngaged a cybersecurity forensic firm to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov