MalwareProfessional ServicesProfessional ServicesRansomwareSupply Chain (3P Vendor)Employee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Spiezle

bd_a68d483e20c5e4d8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 25, 2021

Filed

Jul 30, 2021

To disclose

5 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

67%

Full breach record for Spiezle →

Spiezle Group, Inc. disclosed a cybersecurity incident discovered on June 25, 2021, involving malware deployed by a third-party vendor. The malware encrypted files and allowed unauthorized access to employee records containing names, Social Security numbers, dates of birth, and employment start dates. Spiezle engaged forensic investigators, removed the third-party, hardened defenses, and offered 12 months of credit monitoring to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Jun 25, 2021

Discovered

Jul 30, 2021

Filed

vs. sector median

13 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

South Carolina State AGbd_957b79817cb57eda2021-07-30Verified
Massachusetts State AGbd_45f615b54a26665f2021-07-29 · +1dVerified
California State AGbd_c17531074cef9c062021-07-29 · +1dCandidate

Name: Spiezle
norm: spiezle
Domain: spiezle.com

Name: Spiezle
norm: spiezle
Domain: spiezle.com
Industry: Professional Servicesllm

Discovered: Jun 25, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1486 Data Encrypted for Impact
Threat actor: Partner
Initial access: supply_chain

During the incident: Engaged a third party forensic firm
Extracted the third-party from Spiezle's system
Hardened Spiezle's defenses against future unauthorized activity
Deployed anti-malware software
Reinforced its firewalls
Updating its policies and procedures
Evaluating its information security program
Arranged for 12 month membership in Trans Union's myTrueldentity credit monitoring services
Arranged for a telephone support line for inquiries
Changes made: Deployed anti-malware software
Reinforced its firewalls
Updating its policies and procedures
Evaluating its information security program to determine if additional controls should be implemented
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 29 · first

California State AGJul 29 · first

South Carolina State AG+1d

Delaware State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/08/Spiezle-Notice-to-Residents.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2021
Raw hash: 99e73044d776fe16895f29f7160929a14664390f78217b9a40e754cd81f5091c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySpiezle

Victim entitySpiezle

Incidentdiscovered Jun 25, 2021

Stated responseEngaged a third party forensic firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov