HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)MediumContained

Holliday Ingram, LLC

bd_aed923d2fa9fa2f9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Mar 9, 2021

To disclose

34 weeks

Affected

1,631state residents only

Linked

3 filings

Confidence

63%

Full breach record for Holliday Ingram, LLC →

Holliday Ingram, LLC notified South Carolina residents of a security incident where unauthorized access to two employee email accounts occurred between June 3, 2020, and July 16, 2020. The investigation concluded on February 5, 2021, revealing that personal information of affected individuals was contained within the compromised emails. Holliday Ingram engaged outside cybersecurity professionals and offered one year of credit monitoring via TransUnion to affected individuals.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due34 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 43 days

discovery → filing · 34 weeks / 236 days

Jun 3, 2020

Begins

Jul 16, 2020

Discovered

Mar 9, 2021

Filed

vs. sector median

+15 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_3895c382b7eb5d6b2021-03-07 · +2dCandidate
Indiana State AGbd_28d8de820699644d2021-03-02 · +7dVerified

Name: Holliday Ingram, LLC
norm: holliday ingram

Name: Holliday Ingram, LLC
norm: holliday ingram
Industry: Professional Servicesllm

Discovered: Jul 16, 2020
Breach occurred: Jun 3, 2020 – Jul 16, 2020
Undetected for: 43 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 5, 2021
Affected individuals: 1,631state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering a one-year membership in myTrueIdentity provided by TransUnion Interactive
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(236 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 2 · first

Maine State AG+5d

South Carolina State AG+7d · this page

Pattern: first filing Mar 2 (IN), last Mar 9 (SC) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/HollidayIngram.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2021
Raw hash: 7d36e16a2f88ca8b91fec1957c22e651bd473b73a5c76a4679e71ae66478349e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHolliday Ingram, LLC

Victim entityHolliday Ingram, LLC

Incidentdiscovered Jul 16, 2020

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov