HackingFinancial ServicesTechnologyFinanceVulnerability ExploitZero-DayCustomer Data InvolvedData ExfiltratedFinancial accountIdentity (basic)CVE-2023-3462LowContained

Alogent

bd_ad229b8cf70b7a59 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 18, 2023

To disclose

—

Affected

400state residents only

Linked

10 records

Confidence

67%

Full breach record for Alogent →

Alogent Holdings, Inc. disclosed a data breach involving a zero-day vulnerability (CVE-2023-3462) in vendor software (MOVEit Transfer) between May 30 and June 1, 2023. The incident exposed customer data including account/routing numbers and personal information related to checks processed through Huntington Bank. Alogent discontinued the software and offered identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

May 30, 2023

Begins

Aug 18, 2023

Filed

This filing is one of 10 records about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_88c243c3d3c295ca2023-07-26 · +23dVerified by operator

Regulatory filings (8) · sorted by filing gap

Washington State AGbd_0d9a92be61a8ab372023-08-22 · +4dVerified
Indiana State AGbd_18e5e916b12d5e7c2023-08-14 · +4dVerified by operator
Maine State AGbd_4a4a783af181541b2023-08-29 · +11dVerified
Maine State AGbd_c9b3d1793f71fb032023-08-31 · +13dVerified

Show 4 more filings ↓up to 229d gap

Oregon State AGbd_bc4d72b1dbff67b42023-09-18 · +31dVerified
Delaware State AGbd_095fa3b99741152a2023-07-12 · +37dCandidate
California State AGbd_b3d9698efebd17ae2023-09-26 · +39dVerified
Illinois State AGbd_e3ee5926a60b917f2023-01-01 · +229dVerified by operator

Name: Alogent
norm: alogent
Domain: alogent.com

Name: Alogent
norm: alogent
Domain: alogent.com
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Breach occurred: May 30, 2023 – Jun 1, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 400state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: exploit_public_facing
CVE references: CVE-2023-3462

During the incident: Discontinued the use of the MOVEit Transfer software
Offering identity theft protection services through IDX
Changes made: Working to replace the MOVEit Transfer solution
Establishing improved security measures to mitigate risk in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Delaware State AG+192d

Indiana State AG+225d

Montana State AG+229d · this page

Washington State AG+233d

Maine State AG+240d

Maine State AG+242d

Oregon State AG+260d

California State AG+268d

Pattern: first filing Jan 1 (IL), last Sep 26 (CA) — a 268-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-575.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 18, 2023
Raw hash: c0d23c26b9f5cae1c8b076ab6894665374dc7825e79616b1ca27b10dc17783af

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityAlogent

Victim entityAlogent

IncidentUnauthorized Access

Stated responseDiscontinued the use of the MOVEit Transfer software

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov