HackingTechnologyInformationVulnerability ExploitTargetedIdentity (basic)Financial accountFinancial credentialsLowContained

Integrated Listening Systems

bd_aa52e367e514efd2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 7, 2015

Filed

Nov 12, 2015

To disclose

5 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Integrated Listening Systems →

Integrated Listening Systems notified Montana residents of a data breach where malicious code on its e-commerce site captured customer checkout data (names, credit card numbers, CVV, billing addresses). The breach occurred on May 18, 2015, and was discovered on October 7, 2015. The company engaged Kroll for forensic investigation and provided one year of identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 142 days

discovery → filing · 5 weeks / 36 days

May 18, 2015

Begins

Oct 7, 2015

Discovered

Nov 12, 2015

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_d524d93f95521f582015-11-16 · +4dVerified

Name: Integrated Listening Systems
norm: integrated listening

Name: Integrated Listening Systems
norm: integrated listening
Industry: Technologyllm

Discovered: Oct 7, 2015
Breach occurred: May 18, 2015
Undetected for: 142 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Had the code removed and the entire site scanned
Moved the site to a new hosting company
Engaged experts to conduct a thorough forensic investigation
Secured the services of Kroll to provide identity monitoring
Changes made: Exploring additional means to increase security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGNov 12 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Integrated-Listening-Systems.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2015
Raw hash: 167fcc77e5c84e55c09088dfc4b3c5705b71db1be80e68ceff35f95d155cc20a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityIntegrated Listening Systems

Victim entityIntegrated Listening Systems

Incidentdiscovered Oct 7, 2015

Stated responseHad the code removed and the entire site scanned

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov