MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedIdentity (basic)Government IDPHIMediumContained

KMG Prestige

bd_d052e0ccc23cd2ee · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 28, 2021

Filed

Feb 7, 2022

To disclose

10 weeks

Affected

1state residents only

Linked

6 filings

Confidence

64%

Full breach record for KMG Prestige →

KMG Prestige, Inc. notified South Carolina residents of a ransomware incident discovered on November 28, 2021, affecting systems on November 27, 2021. Impacted data included names, driver's license numbers, SSNs, and health insurance info. The company engaged forensic experts and the FBI, restored systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 10 weeks / 71 days

Nov 27, 2021

Begins

Nov 28, 2021

Discovered

Feb 7, 2022

Filed

vs. sector median

+3 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by rook about this victim predates this filing by 62 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterookbd_a8a84adf70cecc942021-12-07 · +62dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_9d94c03c9a6b9cac2022-02-07Verified by operator
Massachusetts State AGbd_a939718a990691d82022-02-07Verified
Montana State AGbd_f23c18812ccad0792022-02-07Candidate
Massachusetts State AGbd_6f32a9a2303ecf182022-02-14 · +7dVerified by operator

Name: KMG Prestige
norm: kmg prestige

Name: KMG Prestige
norm: kmg prestige
Industry: Retail & Consumerllm

Discovered: Nov 28, 2021
Breach occurred: Nov 27, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jan 27, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPHI
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Contacted the FBI

During the incident: Engaged outside counsel and third-party forensic experts to assist in the remediation efforts and conduct a thorough investigation
Contacted the FBI to seek assistance and guidance
Secured and safely restored systems and operations
Provided access to Single Bureau Credit Monitoring services at no charge for twelve months
Provided proactive fraud assistance through Cyberscout
Changes made: Implementing additional cybersecurity safeguards
Enhancing employee cybersecurity training
Improving cybersecurity policies, procedures, and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Indiana State AGFeb 7 · first

Massachusetts State AGFeb 7 · first

Montana State AGFeb 7 · first

South Carolina State AGFeb 7 · first · this page

Massachusetts State AG+7d

Pattern: first filing Feb 7 (IN), last Feb 14 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/KMGPrestigeInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2022
Raw hash: 61bada7472a6e2934a52ad4f88fe3612331d12f911af405e474f200f812466e4

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityKMG Prestige

Victim entityKMG Prestige

Incidentdiscovered Nov 28, 2021

Stated responseEngaged outside counsel and third-party forensic experts to assist in the remediation efforts and conduct a thorough investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov