MalwareTechnologyInformationRansomwareData ExfiltratedTargetedCredentialsFinancial accountLowContained

The Home of Transgender Animations and Comics

bd_cab4e57fe15bb4f7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 1, 2020

Filed

Jan 27, 2021

To disclose

26 weeks

Affected

5state residents only

Linked

5 filings

Confidence

66%

SapphireFoxxBeyond.com notified Idaho AG of a breach affecting 5 Idaho residents. Malware installed in June 2020 captured keystrokes (credentials and credit card info) until removal in Dec 2020. Notifications sent Jan 2021 offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 61 days

discovery → filing · 26 weeks / 179 days

Jun 1, 2020

Begins

Aug 1, 2020

Discovered

Jan 27, 2021

Filed

vs. sector median

+7 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_a747be8af28a70b42021-01-28 · +1dVerified
Indiana State AGbd_2777ab4b8c876f292021-01-26 · +1dVerified
Montana State AGbd_bc38e8180c8ba9692021-01-26 · +1dCandidate
Massachusetts State AGbd_f286b2725d82d6e52021-01-26 · +1dVerified

Name: McLane Middleton, P.A.
norm: mclane middleton
Domain: sapphirefoxxbeyond.com

Name: The Home of Transgender Animations and Comics
norm: the home of transgender animations and comics
Domain: sapphirefoxxbeyond.com
Industry: Technologyllm

Discovered: Aug 1, 2020
Breach occurred: Jun 1, 2020 – Dec 12, 2020
Undetected for: 61 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 26, 2021
Affected individuals: 5state-resident count only
Data types: CredentialsFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Idaho Office of the Attorney General

During the incident: Retained an outside forensic expert to investigate
Forensic expert removed malware from the Site
Notified all individuals who logged-on during that time that their username and password may have been compromised
Had all of its users reset their passwords for the Site
Notified all users who had entered credit card numbers... that their credit card numbers may have been compromised
Offered those individuals a two-year membership in Experian IdentityWorks protection services
Working with and continues to work with an outside technology security expert and the Site’s data security attorneys
Incorporate additional software and other security controls
Deployed additional server side threat detection and anti-malware protective software
Mandated password changes
Incorporating additional code plug-ins into the site
Changes made: Deployed additional server side threat detection and anti-malware protective software
Mandated password changes
Incorporating additional code plug-ins into the site to ensure the highest level of security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(179 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 26 · first

Montana State AGJan 26 · first

Massachusetts State AGJan 26 · first

Idaho State AG+1d · this page

New Hampshire State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ag.idaho.gov/content/uploads/2022/03/01-27-21-SapphireFoxxBeyond.com_.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2021
Raw hash: 8cc436dbc1f901385d66f002f4025551598b5efa15d2c1ff8b8d33f6d15019d9

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMcLane Middleton, P.A.

Victim entityThe Home of Transgender Animations and Comics

Incidentdiscovered Aug 1, 2020

Stated responseRetained an outside forensic expert to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceag.idaho.gov