Social EngineeringTechnologyInformationPhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIICredentialsLowContained

DOBSON TECHNOLOGIES, INC.

bd_b254b106dbadb226 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 27, 2023

Filed

Feb 15, 2024

To disclose

50 weeks

Affected

1state residents only

Linked

5 filings

Confidence

64%

Full breach record for DOBSON TECHNOLOGIES, INC. →

Dobson Technologies, Inc. notified Montana residents of unauthorized access to employee email accounts between Nov 19, 2022, and Mar 3, 2023. Discovered Feb 27, 2023. Access likely via phishing. Customer PII may have been exposed. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 100 days

discovery → filing · 50 weeks / 353 days

Nov 19, 2022

Begins

Feb 27, 2023

Discovered

Feb 15, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_1177b5afba155d702024-02-15Verified
Massachusetts State AGbd_152c52500d10a9312024-02-15Verified
Maine State AGbd_a3ed3d5b9ad6993a2024-02-15Verified
Indiana State AGbd_b1f002cdc5969de12024-02-15Verified

Name: DOBSON TECHNOLOGIES, INC.
norm: dobson technologies
Domain: dobson.net

Name: DOBSON TECHNOLOGIES, INC.
norm: dobson technologies
Domain: dobson.net
Industry: Technologyllm

Discovered: Feb 27, 2023
Breach occurred: Nov 19, 2022 – Mar 3, 2023
Undetected for: 100 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 15, 2024
Affected individuals: 1state-resident count only
Data types: PIICredentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Immediately launched an investigation
Undertook a comprehensive review of the contents of the accessed email accounts
Implemented additional safeguards
Providing you with access to [Extra3] of credit monitoring and identity protection services through Experian at no cost
Changes made: Implemented additional safeguards to help prevent similar incidents from occurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 50 weeks(353 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGFeb 15 · first

Massachusetts State AGFeb 15 · first

Maine State AGFeb 15 · first

Indiana State AGFeb 15 · first

Montana State AGFeb 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1104.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2024
Raw hash: c63a9f2977a807633d33f23872dd394b136a33969cbbbe2d677dcc3eb67f44a7

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDOBSON TECHNOLOGIES, INC.

Victim entityDOBSON TECHNOLOGIES, INC.

Incidentdiscovered Feb 27, 2023

Stated responseImmediately launched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov