HackingFinancial ServicesFinanceStolen CredentialsMulti-Stage ChainCustomer Data InvolvedDelayed DiscoveryFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

CUSO Financial Services, L.P.

bd_c6c0f3798969948d · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 19, 2024

Filed

Oct 28, 2024

To disclose

40 weeks

Affected

5,668state residents only

Linked

10 filings

Confidence

71%

Full breach record for CUSO Financial Services, L.P. →4 incidents on file

CUSO Financial Services, LP reported a cyberattack involving unauthorized access to a third-party archiving service account between Dec 19, 2023, and Jan 19, 2024. The breach exposed names, SSNs, passport numbers, medical/health insurance info, driver's licenses, and financial account data. Approximately 5,668 Washington residents were notified on Oct 28, 2024. CUSO engaged specialists, notified law enforcement, and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d40 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 31 days

discovery → filing · 40 weeks / 283 days

Dec 19, 2023

Begins

Jan 19, 2024

Discovered

Oct 28, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_55bb67f5c342d2332024-10-28Verified
Oregon State AGbd_5f808b59a614fead2024-10-28Candidate
Massachusetts State AGbd_6c11ed7ee486cb072024-10-28Verified
Maine State AGbd_af8d29e7a825abc22024-10-28Verified

Show 5 more filings ↓up to 27d gap

Montana State AGbd_b7bc262cfb0f930a2024-10-28Verified by operator
New Hampshire State AGbd_c148a7a23112a55a2024-10-28Verified
Indiana State AGbd_f79f964303bed0832024-10-28Verified
Massachusetts State AGbd_adef04a433aee23f2024-11-01 · +4dVerified
Illinois State AGbd_0a00ba88644e3f9b2024-10-01 · +27dVerified by operator

Name: CUSO Financial Services, L.P.
norm: cuso financial

Name: CUSO Financial Services, L.P.
norm: cuso financial
Industry: Financial Servicesllm

Discovered: Jan 19, 2024
Breach occurred: Dec 19, 2023 – Jan 19, 2024
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 28, 2024
Affected individuals: 5,668state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthPassport numberHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notified federal law enforcement regarding the eventproviding written notice of this event to relevant state regulators
Initial access: valid_credentials

During the incident: Investigated this activity
Undertook a thorough and complex review of the affected account with the assistance of specialists
Notified federal law enforcement regarding the event
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for one (1) year, through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this event to relevant state regulators
Providing written notice... to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 40 weeks(283 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Illinois State AGOct 1 · first

California State AG+27d

Oregon State AG+27d

Massachusetts State AG+27d

Maine State AG+27d

Montana State AG+27d

New Hampshire State AG+27d

Indiana State AG+27d

Washington State AG+27d · this page

Massachusetts State AG+31d

Pattern: first filing Oct 1 (IL), last Nov 1 (MA) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA31179.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 28, 2024
Raw hash: 8bb2ca26c0ad325b29b99cb521aa400d2710e352f738d66ff8882c7b914d895a

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityCUSO Financial Services, L.P.

Victim entityCUSO Financial Services, L.P.

Incidentdiscovered Jan 19, 2024

Stated responseInvestigated this activity

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com