Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedFinancial accountPIILowContained

Axis Insurance Services, LLC

bd_dfa6c1f54dc35279 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 12, 2016

Filed

Jan 30, 2017

To disclose

7 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Axis Insurance Services, LLC →

Axis Insurance Services, LLC notified Montana residents that on December 12, 2016, an employee clicked a phishing link and compromised credentials were used to send further phishing emails. The compromised account contained business checks with bank account and routing numbers. No evidence of actual misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 49 days

Dec 12, 2016

Begins

Dec 12, 2016

Discovered

Jan 30, 2017

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Axis Insurance Services, LLC
norm: axis insurance

Name: Axis Insurance Services, LLC
norm: axis insurance
Industry: Financial Servicesllm

Discovered: Dec 12, 2016
Breach occurred: Dec 12, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Financial accountPII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Initiated an investigation, with the assistance of third-party forensic investigators
Took steps to prevent further misuse of this employee’s credentials
Confirmed the security of both her workstation and our network
Instructed all Axis employees to change their email passwords
Continue to monitor our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Axis-Insurance-Services-LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2017
Raw hash: 0708685b344fa05fc63d38a4c36606259182f783313df6b750a938f54c4a6a9a

Reporting entityAxis Insurance Services, LLC

Victim entityAxis Insurance Services, LLC

Incidentdiscovered Dec 12, 2016

Stated responseInitiated an investigation, with the assistance of third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov