HackingProfessional ServicesProfessional ServicesStolen CredentialsPhishingData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountPIIMediumContained

Richardson Sales Performance

bd_d7184a7fc3abd4c0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 6, 2020

Filed

Feb 18, 2021

To disclose

15 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Richardson Sales Performance →

Richardson Sales Performance notified Montana residents of a cybersecurity incident where an unauthorized actor gained access to its network starting September 22, 2020. The actor published screenshots of network data on November 6, 2020. The company determined that personal information, including names, SSNs, government IDs, and financial account numbers, may have been accessed. The company offered one year of Experian IdentityWorks services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 45 days

discovery → filing · 15 weeks / 104 days

Sep 22, 2020

Begins

Nov 6, 2020

Discovered

Feb 18, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_0b2c5d0140e09e472020-12-29 · +51dCandidate
Indiana State AGbd_d7cf715e086c77632020-12-24 · +56dVerified

Name: Richardson Sales Performance
norm: richardson sales performance

Name: Richardson Sales Performance
norm: richardson sales performance
Industry: Professional Servicesllm

Discovered: Nov 6, 2020
Breach occurred: Sep 22, 2020
Undetected for: 45 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 18, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1566 Phishing
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Promptly investigated the incident
Deployed additional protections to help defend against any further intrusion
Conducted an exhaustive review of files
Offering you a range of identity protection services for one year provided by Experian’s® IdentityWorksSM at no cost to you
Changes made: Continually working to enhance our security measures and respond to any threats to our networks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(104 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGDec 24 · first

Massachusetts State AG+5d

Montana State AG+56d · this page

Pattern: first filing Dec 24 (IN), last Feb 18 (MT) — a 56-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/richSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 18, 2021
Raw hash: 7937d7c9c9ae18b3600aaed68aa4b0967a80bd15384633ccaa165340d91a3557

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityRichardson Sales Performance

Victim entityRichardson Sales Performance

Incidentdiscovered Nov 6, 2020

Stated responsePromptly investigated the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov