HackingTechnologyInformationStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDEmploymentFinancial accountHealth (basic)MediumActive

SHI INTERNATIONAL CORP.

bd_d771f4eeadf764ea · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 4, 2022

Filed

Jul 22, 2022

To disclose

18 days

Affected

4state residents only

Linked

5 filings

Confidence

66%

Full breach record for SHI INTERNATIONAL CORP. →

SHI International Corp. notified Montana residents of a data breach discovered on July 4, 2022, involving unauthorized access to employee systems. Compromised data included names, SSNs, addresses, employment details, financial info, and health data. SHI engaged forensic experts, FBI, and CISA, and offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Jul 4, 2022

Discovered

Jul 22, 2022

Filed

vs. sector median

16 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_195eab5bc48422562022-09-07 · +47dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_b04e8a62da6b769c2022-07-22Verified by operator
Maine State AGbd_20f0b610e41f14cd2022-07-25 · +3dVerified
Massachusetts State AGbd_61be5c43a32ceab42022-07-27 · +5dVerified

Name: SHI INTERNATIONAL CORP.
norm: shi international

Name: SHI INTERNATIONAL CORP.
norm: shi international
Industry: Technologyllm

Discovered: Jul 4, 2022
Materiality determined: —
Notification sent: Jul 22, 2022
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDEmploymentFinancial accountHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Working with federal law enforcement including the FBI and the Cybersecurity and Infrastructure Security Agency
Initial access: valid_credentials

During the incident: Working with the assistance of outside cybersecurity experts to further investigate the incident
Took some systems, including SHI’s public websites and email, offline
Working with federal law enforcement including the FBI and the Cybersecurity and Infrastructure Security Agency
Implementing heightened security measures to further protect your information
Arranged for complimentary enrollment, at your option, in Equifax Complete Premier credit monitoring service for two years
Changes made: Implementing heightened security measures to further protect your information and the integrity of our systems and operations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJul 22 · first

Montana State AGJul 22 · first · this page

Maine State AG+3d

Massachusetts State AG+5d

Pattern: first filing Jul 22 (IN), last Jul 27 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2022
Raw hash: 2b2e0b42eac6eed45dd458b4082fe1e420eccf3700d50e695c1b923957dc41ee

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entitySHI INTERNATIONAL CORP.

Victim entitySHI INTERNATIONAL CORP.

Incidentdiscovered Jul 4, 2022

Stated responseWorking with the assistance of outside cybersecurity experts to further investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov