MalwareTechnologyInformationRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

VOXX INTERNATIONAL CORPORATION

bd_b925a4f775577bd5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 7, 2020

Filed

Sep 28, 2020

To disclose

12 weeks

Affected

3state residents only

Linked

6 filings

Confidence

63%

Full breach record for VOXX INTERNATIONAL CORPORATION →2 incidents on file

VOXX International Corporation notified Montana and other states of a ransomware incident discovered on July 7, 2020. Unauthorized access occurred between June 4 and July 7, 2020, resulting in data encryption and exfiltration of employee and contractor PII, including SSNs, financial account numbers, and health insurance info. VOXX engaged forensic investigators and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 12 weeks / 83 days

Jun 4, 2020

Begins

Jul 7, 2020

Discovered

Sep 28, 2020

Filed

vs. sector median

7 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_3efa1d12ee8845082020-09-28Candidate
Indiana State AGbd_7ba01860a5e41fde2020-09-28Verified
Massachusetts State AGbd_c2cc45fff5e24a362020-09-28Verified
HHS OCRbd_c414b2549bcad87c2020-09-28Verified

Show 1 more filing ↓up to 1d gap

New Hampshire State AGbd_4dfd416a71abcfe12020-09-29 · +1dVerified

Name: VOXX INTERNATIONAL CORPORATION
norm: voxx international

Name: VOXX INTERNATIONAL CORPORATION
norm: voxx international
Industry: Technologyllm

Discovered: Jul 7, 2020
Breach occurred: Jun 4, 2020 – Jul 7, 2020
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial

During the incident: Engaged a cybersecurity firm
Secured the services of Experian to offer complimentary one-year membership to Experian’s IdentityWorks
Implemented additional security measures to enhance the security of our network
Deployed an endpoint threat detection and response tool
Changes made: Deployed an endpoint threat detection and response tool
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGSep 28 · first

Indiana State AGSep 28 · first

Massachusetts State AGSep 28 · first

HHS OCRSep 28 · first

Montana State AGSep 28 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-217.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2020
Raw hash: 84fba9b653d1f17e1aab2678506d17f3e870c9228820bb1dbc98351cee6aba59

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityVOXX INTERNATIONAL CORPORATION

Victim entityVOXX INTERNATIONAL CORPORATION

Incidentdiscovered Jul 7, 2020

Stated responseEngaged a cybersecurity firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov