HackingManufacturingManufacturingStolen CredentialsData ExfiltratedIdentity (basic)Government IDMediumContained

OSI Group, LLC

bd_d169c170582fc62e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 8, 2022

Filed

Mar 7, 2022

To disclose

27 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for OSI Group, LLC →2 incidents on file

OSI Group, LLC notified Montana residents of a cybersecurity incident affecting an OSI server. Discovered on February 8, 2022, the incident potentially exposed names and Social Security numbers. OSI engaged forensic consultants, notified law enforcement, and offered 12 months of credit monitoring. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 days

Feb 8, 2022

Discovered

Mar 7, 2022

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_ad0d6ebd4fcb61c32022-03-07Verified

Name: OSI Group, LLC
norm: osi group

Name: OSI Group, LLC
norm: osi group
Industry: Manufacturingllm

Discovered: Feb 8, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Engaged cybersecurity team and independent forensic consultants to investigate and contain the Incident
Informed law enforcement
Launched an investigation into the Incident
Reinforced security safeguards
Offering complimentary 3-bureau credit monitoring service for twelve (12) months
Changes made: Reinforced security safeguards to reduce the likelihood of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMar 7 · first

Montana State AGMar 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-246.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 7, 2022
Raw hash: 037946c71e9fed889f1efc478890a70352e375ef4ca075e9e3803614858a3a19

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityOSI Group, LLC

Victim entityOSI Group, LLC

Incidentdiscovered Feb 8, 2022

Stated responseEngaged cybersecurity team and independent forensic consultants to investigate and contain the Incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov