HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Livingston International

bd_d9a51af898979c77 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2022

Filed

Apr 11, 2023

To disclose

19 weeks

Affected

6state residents only

Linked

8 filings

Confidence

64%

Full breach record for Livingston International →2 incidents on file

Livingston International Inc. notified Montana residents of a December 2022 data security incident affecting current and former associates. Personal and ID information, including names, SSNs, addresses, and DOBs, was potentially accessed. No evidence of misuse was found. The company engaged third-party experts, notified authorities, and offered 24 months of complimentary credit monitoring and fraud assistance via Cyberscout/Identity Force.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 131 days

Dec 1, 2022

Begins

Dec 1, 2022

Discovered

Apr 11, 2023

Filed

vs. sector median

+8 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteblacksuitbd_2be963ef20c780662023-01-17 · +84dVerified
Leak Siteavoslockerbd_1557fc58497f90a92022-12-26 · +106dVerified by operator

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_cea56cb7ecae36282023-04-21 · +10dVerified by operator
Maine State AGbd_2daf5bfec4c1e1872023-04-22 · +11dCandidate
Massachusetts State AGbd_f24e3ad00bd6c5ab2023-04-22 · +11dVerified by operator
Illinois State AGbd_0e2f93e80e4cda682023-01-01 · +100dVerified by operator

Show 1 more filing ↓up to 100d gap

Illinois State AGbd_1e110ed342d8061d2023-01-01 · +100dVerified by operator

Name: Livingston International
norm: livingston international
Domain: livingstonintl.com

Name: Livingston International
norm: livingston international
Domain: livingstonintl.com
Industry: Manufacturingllm

Discovered: Dec 1, 2022
Breach occurred: Dec 1, 2022 – Dec 31, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 11, 2023
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified the appropriate authorities
Initial access: valid_credentials

During the incident: Investigating the scope of that incident with third-party experts
Notified the appropriate authorities
Implementing enhanced safeguards to its systems, security and practices
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score/Cyber Monitoring services at no charge
Providing you with proactive fraud assistance
Changes made: Implementing enhanced safeguards to its systems, security and practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(131 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Illinois State AGJan 1 · first

Montana State AG+100d · this page

Vermont State AG+110d

Maine State AG+111d

Massachusetts State AG+111d

Pattern: first filing Jan 1 (IL), last Apr 22 (MA) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-636.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 11, 2023
Raw hash: 28cb0c9b4d51f06c829d986b9eec1a3fa828e9d4bac6a6d1933985e2811fbad0

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityLivingston International

Victim entityLivingston International

Incidentdiscovered Dec 1, 2022

Stated responseInvestigating the scope of that incident with third-party experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov