MalwareTechnologyHealthcareInformationRansomwareData EncryptedPIIPHIIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Wolverine Solutions Group

bd_ba0d269a5a8a147c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 23, 2018

Filed

Dec 27, 2018

To disclose

14 weeks

Affected

79state residents only

Linked

4 filings

Confidence

66%

Full breach record for Wolverine Solutions Group →2 incidents on file

Wolverine Solutions Group notified Montana AG of a September 23, 2018 ransomware incident affecting Blue Cross Blue Shield of Michigan members. Accessible data included demographic info, health plan numbers, medical info, SSNs, and financial account data. No evidence of data extraction was found. Affected individuals received 24 months of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 95 days

Sep 23, 2018

Begins

Sep 23, 2018

Discovered

Dec 27, 2018

Filed

vs. sector median

+3 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_4602af0c0261787c2018-12-28 · +1dVerified
Massachusetts State AGbd_86ef4dd3f09bb3892018-12-28 · +1dVerified
HHS OCRbd_f1d8b234d01525492018-12-28 · +1dVerified

Name: Wolverine Solutions Group
norm: wolverine solutions

Name: Wolverine Solutions Group
norm: wolverine solutions
Industry: TechnologyllmHealthcarellm

Discovered: Sep 23, 2018
Breach occurred: Sep 23, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 28, 2018
Affected individuals: 79state-resident count only
Data types: PIIPHIIdentity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Hired a forensics expert to investigate the issue
Arranged for affected individuals to have AllClear ID protect their identity for 24 months at no cost
Changes made: Migrated to a different computer system that has added protections
Training our workforce in safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(95 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGDec 27 · first · this page

California State AG+1d

Massachusetts State AG+1d

HHS OCR+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-91.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 27, 2018
Raw hash: 19b1a8e5c792031e940e842fe3c0d82255e6e47bbb25ade071b118182991e9fd

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWolverine Solutions Group

Victim entityWolverine Solutions Group

Incidentdiscovered Sep 23, 2018

Stated responseHired a forensics expert to investigate the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov