HackingTelecom & MediaInformationStolen CredentialsCustomer Data InvolvedGovernment IDFinancial accountMediumActive

Copper Valley Telephone Cooperative, Inc.

bd_b7283db159dcae81 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 21, 2024

Filed

Jan 2, 2025

To disclose

6 weeks

Affected

12state residents only

Linked

6 filings

Confidence

67%

Full breach record for Copper Valley Telephone Cooperative, Inc. →

Copper Valley Telephone Cooperative, Inc. notified Montana residents of a data incident on November 21, 2024, where a threat actor obtained credentials. Affected data included Social Security numbers and capital credit account information. The company engaged Kroll for credit monitoring and is continuing its investigation.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 42 days

Nov 21, 2024

Discovered

Jan 2, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_087609b52a97f1ae2025-01-02Candidate
Montana State AGbd_73542f20d33c74102025-01-02Verified
Indiana State AGbd_79148eb5055eefab2025-01-02Verified
New Hampshire State AGbd_9d74e603109b82c22025-01-02Verified

Show 1 more filing ↓up to 6d gap

Massachusetts State AGbd_db844cd837da1a1e2025-01-08 · +6dVerified

Name: Copper Valley Telephone Cooperative, Inc.
norm: copper valley telephone cooperative

Name: Copper Valley Telephone Cooperative, Inc.
norm: copper valley telephone cooperative
Industry: Telecom & Mediallm

Discovered: Nov 21, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 12state-resident count only
Data types: Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Began an internal investigation
Strengthened our data security compliance programs
Continuing to monitor and investigate the situation
Secured the services of Kroll to provide identity monitoring
Changes made: Strengthened our data security compliance programs to avoid future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGJan 2 · first

Montana State AGJan 2 · first

Indiana State AGJan 2 · first

New Hampshire State AGJan 2 · first

Montana State AGJan 2 · first · this page

Massachusetts State AG+6d

Pattern: first filing Jan 2 (ME), last Jan 8 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/12/Consumer-notification-letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 2, 2025
Raw hash: aa820516275ab2df87f5aa36be1cbaa46f47b668af6bf36ce5c3ba6af13ca07d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCopper Valley Telephone Cooperative, Inc.

Victim entityCopper Valley Telephone Cooperative, Inc.

Incidentdiscovered Nov 21, 2024

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov