Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedPIIIdentity (basic)LowContained

Miers Insurance Co.

bd_c0ca94358713ddee · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 24, 2020

Filed

Dec 10, 2020

To disclose

20 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Miers Insurance Co. →

Miers Insurance Co. notified individuals of unauthorized access to a single employee email account between July 10-14, 2020. The breach was discovered on July 24, 2020. Personal information was present in the account. Miers engaged forensic investigators, reset passwords, implemented MFA, and offered 12 months of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 20 weeks / 139 days

Jul 10, 2020

Begins

Jul 24, 2020

Discovered

Dec 10, 2020

Filed

vs. sector median

+11 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Miers Insurance Co.
norm: miers insurance

Name: Miers Insurance Co.
norm: miers insurance
Industry: Financial Servicesllm

Discovered: Jul 24, 2020
Breach occurred: Jul 10, 2020 – Jul 14, 2020
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Began working with a third-party forensic investigation firm
Reset passwords for the involved impacted email account
Instituted multifactor authentication
Increased email security
Arranged to have Kroll protect your identity for 12 months at no cost
Changes made: Reviewing company policies and procedures relating to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(139 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/miersSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 10, 2020
Raw hash: 849f83fa4e04b5125ffde89654a11c254d75376e06362136956135c2929f833a

Reporting entityMiers Insurance Co.

Victim entityMiers Insurance Co.

Incidentdiscovered Jul 24, 2020

Stated responseBegan working with a third-party forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov