HackingProfessional ServicesFinancial ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Cunningham Lindsey

bd_b9d4d7c70a314c01 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 2, 2020

Filed

Aug 24, 2020

To disclose

22 days

Affected

3state residents only

Linked

3 filings

Confidence

65%

Sedgwick Claims Management Services notified affected individuals that unauthorized access to Cunningham Lindsey data servers between July 31 and August 2, 2020, may have exposed names and Social Security numbers. Sedgwick detected the activity on August 2, 2020, and offered one year of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 22 days

Jul 31, 2020

Begins

Aug 2, 2020

Discovered

Aug 24, 2020

Filed

vs. sector median

14 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_d007ad00799864012020-08-25 · +1dVerified
California State AGbd_ba734fac0af256f92021-01-12 · +141dVerified

Name: SEDGWICK CLAIMS MANAGEMENT SERVICES, INC.
norm: sedgwick claims management

Name: Cunningham Lindsey
norm: cunningham lindsey
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: Aug 2, 2020
Breach occurred: Jul 31, 2020 – Aug 2, 2020
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 6, 2020
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Offered one year of complimentary credit monitoring
Engaged in a thorough review of this incident
Changes made: Undertake efforts to minimize the likelihood of such an incident happening again
Continually refining privacy and security programs
Regularly training employees
Conducting annual privacy assessments
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGAug 24 · first · this page

New Hampshire State AG+1d

California State AG+141d

Pattern: first filing Aug 24 (MT), last Jan 12 (CA) — a 141-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Sedgwick-Claims-Management-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 24, 2020
Raw hash: 14cd343c25fdc831a15fa6bdf829a3ff9ecb569ff20ed333cd49fb896154dcef

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySEDGWICK CLAIMS MANAGEMENT SERVICES, INC.

Victim entityCunningham Lindsey

Incidentdiscovered Aug 2, 2020

Stated responseOffered one year of complimentary credit monitoring

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov