MalwareRetail & ConsumerRetailRansomwareStolen CredentialsCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedCredentialsFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Tree Top Associates, LLC

bd_bd17c41f7f086b29 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 11, 2020

Filed

Dec 23, 2020

To disclose

6 weeks

Affected

9,721state residents only

Linked

6 filings

Confidence

69%

Full breach record for Tree Top Associates, LLC →

Tree Top, Inc. disclosed a ransomware incident discovered on November 11, 2020, where attackers used compromised credentials to encrypt servers containing PII. 9,721 Washington residents were affected. Data included names, SSNs, DOBs, bank info, and credit card details. The company engaged forensic experts, secured systems, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 6 weeks / 42 days

Nov 11, 2020

Discovered

Dec 23, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_38a50ff83146fbce2020-12-23Verified
Indiana State AGbd_6dfe39ea020d3b792020-12-23Verified
Montana State AGbd_9827219855a009c92020-12-23Verified
Maine State AGbd_d02b3fbeee3e988c2020-12-23Verified

Show 1 more filing ↓up to 2d gap

Maine State AGbd_e05797d3b33411fc2020-12-21 · +2dVerified

Name: Tree Top Associates, LLC
norm: tree top associates

Name: Tree Top Associates, LLC
norm: tree top associates
Industry: Retail & Consumerllm

Discovered: Nov 11, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 9,721state-resident count only
Data types: CredentialsFinancial accountHealth (basic)Identity (basic)Government IDPHI
Data elements: NameSocial Security numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Conducted a thorough forensic investigation with the assistance of outside cybersecurity experts
Terminated the attackers' access to our network
Took steps to ensure the security of our network and systems, and to restore operations of our systems
Upgraded our security controls company-wide
Installed leading information security technologies that provide around-the-clock monitoring of our systems and network to detect threats and automatically block suspicious activity in real time
Changes made: Upgraded our security controls company-wide
Installed leading information security technologies that provide around-the-clock monitoring of our systems and network to detect threats and automatically block suspicious activity in real time
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGDec 21 · first

Massachusetts State AG+2d

Indiana State AG+2d

Montana State AG+2d

Maine State AG+2d

Washington State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10377.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2020
Raw hash: 92ef79b86fdec550e68eb89967cb569cbe624407e40a4b10f996f5cdb0bbd97d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTree Top Associates, LLC

Victim entityTree Top Associates, LLC

Incidentdiscovered Nov 11, 2020

Stated responseConducted a thorough forensic investigation with the assistance of outside cybersecurity experts

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com