Social EngineeringTechnologyInformationPhishingEmployee Data InvolvedTargetedPIIGovernment IDEmploymentMediumContained

TerraSond Limited

bd_bc03c75d6311b406 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2018

Filed

Jul 10, 2018

To disclose

26 days

Affected

1state residents only

Confidence

66%

Full breach record for TerraSond Limited →

TerraSond Limited notified Montana residents that W-2 forms containing PII (SSN, name, address, wage info) of current and former employees were compromised. A former employee was phished, leading to unauthorized access starting Feb 14, 2018. The incident was discovered June 14, 2018. TerraSond engaged the FBI, offered 12 months of LifeLock credit monitoring, and is implementing security improvements.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 120 days

discovery → filing · 26 days

Feb 14, 2018

Begins

Jun 14, 2018

Discovered

Jul 10, 2018

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: TerraSond Limited
norm: terrasond

Name: TerraSond Limited
norm: terrasond
Industry: Technologyllm

Discovered: Jun 14, 2018
Breach occurred: Feb 14, 2018
Undetected for: 120 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2018
Affected individuals: 1state-resident count only
Data types: PIIGovernment IDEmployment
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementWorking with the FBI
Initial access: phishing_link

During the incident: Notified law enforcement of this incident
Working with the FBI to investigate further
Working with outside consultants to implement any needed changes in how we protect the information of our employees
Conducting appropriate assessments of its system to ensure its security
Offering 12 months of credit monitoring services through LifeLock
Changes made: Implementing changes in how we protect the information of our employees
Conducting appropriate assessments of its system to ensure its security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/TerraSond.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2018
Raw hash: 09ead27e089e4e3ec9ebcac65db3ed498cc9809b7fb3d4666fefda6c82dfbf39

Reporting entityTerraSond Limited

Victim entityTerraSond Limited

Incidentdiscovered Jun 14, 2018

Stated responseNotified law enforcement of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov