MalwareOtherRansomwareRansom DemandedData EncryptedPIIIdentity (basic)LowContained

Partnerships in Community Living, Inc.

bd_e02d80c95465b7ab · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 7, 2020

Filed

Apr 27, 2021

To disclose

20 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Partnerships in Community Living, Inc. →

Partnerships in Community Living, Inc. notified affected individuals of a ransomware attack occurring on or around December 7, 2020. The incident encrypted servers and potentially exposed personal information. The organization engaged forensic investigators, contained the threat, and offered 12 months of identity theft protection services. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 141 days

Dec 7, 2020

Begins

Dec 7, 2020

Discovered

Apr 27, 2021

Filed

vs. sector median

+12 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Oregon State AGbd_032cf5a44741a16c2021-04-27Candidate

Name: Partnerships in Community Living, Inc.
norm: partnerships in community living

Name: Partnerships in Community Living, Inc.
norm: partnerships in community living
Industry: Otherllm

Discovered: Dec 7, 2020
Breach occurred: Dec 7, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 27, 2021
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Took action to contain the infection
Hired a specialized cybersecurity firm
Removed the threat
Restored services
Offering identity theft protection services through IDX
Resetting passwords
Increasing the security of the VPN
Implementing cyber security training for employees
Changes made: Resetting passwords
Increasing the security of the VPN
Implementing cyber security training for employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(141 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Oregon State AGApr 27 · first

Montana State AGApr 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Partner-Notif-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 27, 2021
Raw hash: b8902563cc6dde21abb7d5e910f4449c4743d811e009c645f1fe05d1614b846a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPartnerships in Community Living, Inc.

Victim entityPartnerships in Community Living, Inc.

Incidentdiscovered Dec 7, 2020

Stated responseTook action to contain the infection

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov