HackingOtherCustomer Data InvolvedTargetedHealth (basic)Identity (basic)Government IDPHIMediumContained

International Mission Board

bd_deb2f2346ecff13a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2018

Filed

Jul 6, 2018

To disclose

12 weeks

Affected

992state residents only

Linked

7 filings

Confidence

69%

Full breach record for International Mission Board →

International Mission Board notified Washington AG of a cyberattack discovered April 11, 2018. An unknown criminal actor accessed a data file containing personal information (name, address, SSN, DOB, limited health info) of 992 Washington residents. IMB terminated access, engaged forensic experts, and provided 12 months of credit monitoring. Notification letters were mailed July 6, 2018.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 86 days

Apr 11, 2018

Discovered

Jul 6, 2018

Filed

vs. sector median

+4 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_1e1369f1c0be557a2018-07-06Verified
New Hampshire State AGbd_2e8a0c7eb3e6b2df2018-07-06Verified
Massachusetts State AGbd_6a19fcd136c9f5c22018-07-06Verified
Oregon State AGbd_a4f2be36b26874c22018-07-06Verified

Show 2 more filings ↓up to 10d gap

Montana State AGbd_9d32b8f4df8a3ccf2018-07-05 · +1dCandidate
South Carolina State AGbd_4301755604d700af2018-07-16 · +10dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: International Mission Board
norm: international mission board
Domain: internationalmissionboard.org
Industry: Otherllm

Discovered: Apr 11, 2018
Materiality determined: —
Notification sent: Jul 6, 2018
Affected individuals: 992state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Medical informationDate of birthSocial Security numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Washington Attorney GeneralCoordinating with a law enforcement investigation

During the incident: Terminated the unauthorized access
Implemented measures to secure its network
Launched a thorough investigation, with the help of leading independent data forensics experts
Coordinating with a law enforcement investigation
Provided potentially impacted individuals with identity theft restoration and credit monitoring services for 12 months at no cost to the individual, through ID Experts
Provided notice to the credit reporting agencies
Changes made: Implementing new security technologies around IMB’s most sensitive systems and data
Improving its ability to detect and respond to external attacks to its data network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGJul 5 · first

California State AG+1d

New Hampshire State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

Washington State AG+1d · this page

South Carolina State AG+11d

Pattern: first filing Jul 5 (MT), last Jul 16 (SC) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9579.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2018
Raw hash: 54c06d225c7899d916012af2749be92866a10ac8f7c556ab19df5c2b76259a8e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityInternational Mission Board

Incidentdiscovered Apr 11, 2018

Stated responseTerminated the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com