MalwareTechnologyInformationRansomwareData EncryptedTargetedCredentialsFinancial accountLowContained

Sapphire Foxx

bd_bc38e8180c8ba969 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 1, 2020

Filed

Jan 26, 2021

To disclose

25 weeks

Affected

5state residents only

Linked

5 filings

Confidence

65%

Sapphire Foxx Beyond experienced a data breach involving malware installed on its website between June and December 2020. The malware compromised user credentials (usernames and passwords) and, for some users, credit card information entered on the site. The company retained forensic experts, removed the malware, mandated password resets, and offered identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 61 days

discovery → filing · 25 weeks / 178 days

Jun 1, 2020

Begins

Aug 1, 2020

Discovered

Jan 26, 2021

Filed

vs. sector median

+7 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_2777ab4b8c876f292021-01-26Verified
Massachusetts State AGbd_f286b2725d82d6e52021-01-26Verified
Idaho State AGbd_cab4e57fe15bb4f72021-01-27 · +1dVerified
New Hampshire State AGbd_a747be8af28a70b42021-01-28 · +2dVerified

Name: Sapphire Foxx
norm: sapphire foxx
Domain: sapphirefoxxbeyond.com

Name: Sapphire Foxx
norm: sapphire foxx
Domain: sapphirefoxxbeyond.com
Industry: Technologyllm

Discovered: Aug 1, 2020
Breach occurred: Jun 1, 2020 – Dec 12, 2020
Undetected for: 61 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 21, 2021
Affected individuals: 5state-resident count only
Data types: CredentialsFinancial account
Attack vector: Misconfiguration
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Retained an outside forensic expert in November 2020
Removed the malware on December 12, 2020
Required all users to create a new password
Deployed additional server side threat detection and anti-malware protective software
Mandated password changes
Incorporating additional code plug-ins into the site
Working with an outside forensic expert and cybersecurity attorney
Changes made: Deployed additional server side threat detection and anti-malware protective software
Mandated password changes
Incorporating additional code plug-ins into the site to ensure the highest level of security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(178 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 26 · first

Massachusetts State AGJan 26 · first

Montana State AGJan 26 · first · this page

Idaho State AG+1d

New Hampshire State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Sapphire-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2021
Raw hash: 365fdc8e006801a75dd85f767be72efff2692737a4ff225019982f07f52c8d77

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySapphire Foxx

Victim entitySapphire Foxx

Incidentdiscovered Aug 1, 2020

Stated responseRetained an outside forensic expert in November 2020

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov