HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Wolff Principal Holdings, LP

bd_dd0cb7151c24ced4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2020

Filed

Jul 17, 2020

To disclose

22 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Wolff Principal Holdings, LP →3 incidents on file

Wolff Principal Holdings, LP dba The Wolff Company notified Montana residents of a data breach where an unknown intruder accessed systems on Feb 13, 2020, potentially copying personal information including names, SSNs, and DOBs. The company engaged forensic specialists, secured systems, and offered 12 months of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 weeks / 155 days

Feb 13, 2020

Begins

Feb 13, 2020

Discovered

Jul 17, 2020

Filed

vs. sector median

+3 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_891916519b0231c32020-07-17Verified

Name: Wolff Principal Holdings, LP
norm: wolff principal

Name: Wolff Principal Holdings, LP
norm: wolff principal
Industry: Professional Servicesllm

Discovered: Feb 13, 2020
Breach occurred: Feb 13, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Provided relevant regulatory notices

During the incident: Took steps to secure our systems
Began working with outside computer forensics specialists
Implemented advanced threat detection and response solutions across all endpoints
Updated our risk management platform
Provided relevant regulatory notices
Secured the services of Kroll to provide identity monitoring services at no cost to you for twelve (12) months
Changes made: Implemented advanced threat detection and response solutions across all endpoints
Updated our risk management platform
Continuously working to increase our organizations cybersecurity posture by aligning with the latest frameworks and best practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(155 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 17 · first

Montana State AGJul 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Wolff-Principal-Holdings-LP-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2020
Raw hash: 2ab63dd5fa05d87313d1e5ebaf5ceba71c31372ee3d41d74fb5f0ee0e298b7a4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWolff Principal Holdings, LP

Victim entityWolff Principal Holdings, LP

Incidentdiscovered Feb 13, 2020

Stated responseTook steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov