MalwareTechnologyProfessional ServicesInformationRansomwareStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDMediumResolved

IBEX GLOBAL SOLUTIONS, INC.

bd_da5e96b84dd8ac50 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 17, 2020

Filed

Aug 6, 2021

To disclose

51 weeks

Affected

115state residents only

Linked

9 filings

Confidence

65%

Full breach record for IBEX GLOBAL SOLUTIONS, INC. →

Ibex Global Solutions, Inc. notified Montana residents of a malware incident occurring between July 27 and August 17, 2020. Unauthorized access to systems resulted in the potential exposure of names and government IDs. Ibex engaged third-party specialists, reported to law enforcement, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 21 days

discovery → filing · 51 weeks / 354 days

Jul 27, 2020

Begins

Aug 17, 2020

Discovered

Aug 6, 2021

Filed

vs. sector median

+32 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Washington State AGbd_48d8c7a3390156912021-08-06Candidate
Indiana State AGbd_71cdba9e170c4cdd2021-08-06Verified
California State AGbd_b1fa14e4639e6b2d2021-08-06Verified
South Carolina State AGbd_bb2fd247d5bffb422021-08-06Verified

Show 4 more filings ↓up to 1d gap

Oregon State AGbd_c39ef7cb45979a6e2021-08-06Verified
Delaware State AGbd_c832140b7d57b6842021-08-06Verified
Maine State AGbd_fb0587e3708dc5e62021-08-06Verified
Massachusetts State AGbd_a5e537fa1bb7a5022021-08-07 · +1dVerified

Name: IBEX GLOBAL SOLUTIONS, INC.
norm: ibex global

Name: IBEX GLOBAL SOLUTIONS, INC.
norm: ibex global
Industry: TechnologyllmProfessional Servicesllm

Discovered: Aug 17, 2020
Breach occurred: Jul 27, 2020 – Aug 17, 2020
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 11, 2021
Affected individuals: 115state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported this incident to law enforcement
Initial access: valid_credentials

During the incident: Took these systems offline
With the assistance of third-party computer specialists, launched an investigation
Reported this incident to law enforcement and are cooperating with their investigation
Offering months of complimentary access to credit monitoring, fraud consultation, and identity theft restoration services through Equifax
Changes made: Implemented additional cybersecurity measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(354 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Washington State AGAug 6 · first

Indiana State AGAug 6 · first

California State AGAug 6 · first

South Carolina State AGAug 6 · first

Oregon State AGAug 6 · first

Delaware State AGAug 6 · first

Maine State AGAug 6 · first

Montana State AGAug 6 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-28.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 6, 2021
Raw hash: 33248ee9a737a4e3ae1e489c5cad661c418b8d1958dd6011eb48842904e3d5b4

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityIBEX GLOBAL SOLUTIONS, INC.

Victim entityIBEX GLOBAL SOLUTIONS, INC.

Incidentdiscovered Aug 17, 2020

Stated responseTook these systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov