HackingTechnologyInformationTargetedPIIIdentity (basic)LowContained

Copia Scientific, LLC

bd_be9453e57cf9de78 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 31, 2023

Filed

May 4, 2023

To disclose

5 weeks

Affected

7state residents only

Linked

6 filings

Confidence

66%

Full breach record for Copia Scientific, LLC →

Copia Scientific, LLC notified Montana residents of a network intrusion occurring around November 8, 2022. The company discovered the incident on March 31, 2023, after a forensic investigation revealed unauthorized access to a limited number of systems. Potentially accessed data included names and other personal information. No evidence of fraudulent misuse was found. Copia Scientific engaged forensic investigators and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 143 days

discovery → filing · 5 weeks / 34 days

Nov 8, 2022

Begins

Mar 31, 2023

Discovered

May 4, 2023

Filed

vs. sector median

6 wks faster

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_100d1126e733c8b22023-05-04Verified
New Hampshire State AGbd_1543ebecaf91c5db2023-05-04Verified
California State AGbd_1ef92822de6692c82023-05-04Candidate
Massachusetts State AGbd_cd4f5dfe4f825fa82023-05-04Verified

Show 1 more filing ↓

Maine State AGbd_d9b9066267b942c52023-05-04Verified

Name: Copia Scientific, LLC
norm: copia scientific

Name: Copia Scientific, LLC
norm: copia scientific
Industry: Technologyllm

Discovered: Mar 31, 2023
Breach occurred: Nov 8, 2022
Undetected for: 143 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 4, 2023
Affected individuals: 7state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Immediately took steps to secure its network
Engaged a third-party forensic firm to investigate the incident
Engaged third-party specialists to investigate the full nature and scope of this incident
Secured its systems
Arranged for you to enroll, at no cost to you, in an identity theft protection service through IDX
Changes made: Continues to work to further enhance the security of the network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGMay 4 · first

New Hampshire State AGMay 4 · first

California State AGMay 4 · first

Massachusetts State AGMay 4 · first

Maine State AGMay 4 · first

Montana State AGMay 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-246.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 4, 2023
Raw hash: 0f8b61a54208abc7902e1b2e3ba946a27f88cf9e78c8a080b3f1bc16b4550fb3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCopia Scientific, LLC

Victim entityCopia Scientific, LLC

Incidentdiscovered Mar 31, 2023

Stated responseImmediately took steps to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov