Social EngineeringTechnologyInformationPhishingStolen CredentialsTargetedPIIIdentity (basic)CredentialsLowContained

Public Knowledge LLC

bd_cbf7ceb5e010a9e8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 15, 2020

Filed

Oct 28, 2020

To disclose

6 weeks

Affected

4state residents only

Confidence

65%

Full breach record for Public Knowledge LLC →

Public Knowledge LLC notified Montana residents of a phishing attack on September 14, 2020, which compromised an employee's Microsoft Outlook credentials. Unauthorized access occurred on September 15, 2020. The company engaged Kroll for forensic investigation and remediation, including password resets and identity monitoring services for affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 weeks / 43 days

Sep 14, 2020

Begins

Sep 15, 2020

Discovered

Oct 28, 2020

Filed

vs. sector median

12 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Public Knowledge LLC
norm: public knowledge

Name: Public Knowledge LLC
norm: public knowledge
Industry: Technologyllm

Discovered: Sep 15, 2020
Breach occurred: Sep 14, 2020 – Sep 15, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2020
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Assembled a team of internal and external experts to investigate the attack
Forensic review of the intrusion by Kroll
Password change and other remedial steps were taken to block access
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Implementing additional safeguards
Offer and will continue to offer training to employees regarding phishing attacks
Changes made: Examined and analyzed existing procedures and systems to ensure appropriate security measures are in place and reinforced
Implementing additional safeguards
Require all employees to be cautious to avoid such attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/pubSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 28, 2020
Raw hash: f6a9c765882082183e1e11458b7abfd575f901403bde593b7dc2e2967bcdaff9

Reporting entityPublic Knowledge LLC

Victim entityPublic Knowledge LLC

Incidentdiscovered Sep 15, 2020

Stated responseAssembled a team of internal and external experts to investigate the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov