HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountMediumActive

Forest City Trade Group, LLC

bd_b9fa5f6bd616b0ca · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 24, 2021

Filed

Jul 20, 2021

To disclose

26 days

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for Forest City Trade Group, LLC →

Forest City Trade Group, LLC notified Montana residents of a cyber attack beginning June 21, 2021, discovered June 24, 2021. Unauthorized access may have exposed names, addresses, SSNs, and HSA bank account numbers. The company engaged forensic experts, notified law enforcement, and offers two years of ID theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 26 days

Jun 21, 2021

Begins

Jun 24, 2021

Discovered

Jul 20, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_ad3fa854f8cd6cc72021-07-21 · +1dVerified
Massachusetts State AGbd_dcf1ae3b080962542021-07-21 · +1dVerified
Oregon State AGbd_faefac60f6217a2d2021-07-22 · +2dVerified
New Hampshire State AGbd_a37a1f81f6f78dc82021-07-29 · +9dVerified

Name: Forest City Trade Group, LLC
norm: forest city trade

Name: Forest City Trade Group, LLC
norm: forest city trade
Industry: Retail & Consumerllm

Discovered: Jun 24, 2021
Breach occurred: Jun 21, 2021
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 24, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: promptly notified law enforcement
Initial access: valid_credentials

During the incident: Promptly notified law enforcement
Engaged a third-party cybersecurity expert to assist with securing our systems and our remediation efforts, and to perform a forensic investigation
Deployed enterprise-wide endpoint monitoring solutions to detect any continued presence of the threat actors in our systems
Changes made: Offer complimentary ID theft protection and monitoring services for two-years
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 20 · first · this page

Maine State AG+1d

Massachusetts State AG+1d

Oregon State AG+2d

New Hampshire State AG+9d

Pattern: first filing Jul 20 (MT), last Jul 29 (NH) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/forestSamp-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 20, 2021
Raw hash: f12bebeb1c198dfa49accd03c9868fe47d85c84df2606e7db3d702a325c609f4

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityForest City Trade Group, LLC

Victim entityForest City Trade Group, LLC

Incidentdiscovered Jun 24, 2021

Stated responsePromptly notified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov