MalwareRetail & ConsumerRetailRansomwareRansom DemandedData ExfiltratedIdentity (basic)LowContained

Harry Norman, Realtors

bd_cde25faeded40dff · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 27, 2020

Filed

Mar 3, 2021

To disclose

9 weeks

Affected

1state residents only

Linked

4 filings

Confidence

64%

Full breach record for Harry Norman, Realtors →

Harry Norman, REALTORS® notified Montana residents of a ransomware attack. The cybercriminal had access between Nov 4 and Dec 29, 2020. The company discovered the incident on Dec 27, 2020. Accessible data included name, address, and [EXTRA1]. The company offered 2 years of credit monitoring and is implementing additional safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 53 days

discovery → filing · 9 weeks / 66 days

Nov 4, 2020

Begins

Dec 27, 2020

Discovered

Mar 3, 2021

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_3ef704ee43d795322021-03-03Verified
Massachusetts State AGbd_8c5dc104ce155eb32021-03-03Verified
Maine State AGbd_a3a7d711fb8803df2021-03-03Verified

Name: Harry Norman, Realtors
norm: harry norman realtors

Name: Harry Norman, Realtors
norm: harry norman realtors
Industry: Retail & Consumerllm

Discovered: Dec 27, 2020
Breach occurred: Nov 4, 2020 – Dec 29, 2020
Undetected for: 53 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 3, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Provided notice to certain state regulators
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of cybersecurity experts
Commenced a thorough data mining effort
Offering two years of complimentary credit monitoring and identity restoration services with Experian
Provided notice to the consumer reporting agencies and certain state regulators
Changes made: Reviewing policies and procedures
Implementing additional safeguards to better protect against an incident like this from occurring in the future
Invested significantly into cybersecurity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMar 3 · first

Massachusetts State AGMar 3 · first

Maine State AGMar 3 · first

Montana State AGMar 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Norman-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2021
Raw hash: dc9b63616b5fc3f7073fb4ef13add50d834a89eb25972b9aa281762a77b9f91a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHarry Norman, Realtors

Victim entityHarry Norman, Realtors

Incidentdiscovered Dec 27, 2020

Stated responseLaunched an investigation with the assistance of cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov