HackingFinancial ServicesFinanceStolen CredentialsTargetedIdentity (basic)CredentialsLowContained

Conrade Insurance Group

bd_e1276ad94978363b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 27, 2023

Filed

Feb 26, 2024

To disclose

31 weeks

Affected

1state residents only

Linked

2 filings

Confidence

64%

Full breach record for Conrade Insurance Group →2 incidents on file

Conrade Insurance Group notified Montana residents of unauthorized access to one employee email account between July 14 and July 27, 2023. The incident involved the compromise of credentials, exposing names and other personal information. Conrade secured the account, investigated, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 13 days

discovery → filing · 31 weeks / 214 days

Jul 14, 2023

Begins

Jul 27, 2023

Discovered

Feb 26, 2024

Filed

vs. sector median

+22 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_70d6079609034a202024-02-26Verified

Name: Conrade Insurance Group
norm: conrade insurance

Name: Conrade Insurance Group
norm: conrade insurance
Industry: Financial Servicesllm

Discovered: Jul 27, 2023
Breach occurred: Jul 14, 2023 – Jul 27, 2023
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 26, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure its email system
Began an investigation
Undertook a comprehensive review of the contents of the affected email account
Offering you access to [Extra2] months of complimentary credit monitoring and identity theft protection services
Changes made: Evaluating policies, procedures, and technical security measures
Implementing additional safeguards as appropriate to further secure information in our email environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(214 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 26 · first

Montana State AGFeb 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1137.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2024
Raw hash: 0d169900a7fc2b113aa57564565f4779f2c6f9f8f279abcbf6d5c3d66a8df157

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityConrade Insurance Group

Victim entityConrade Insurance Group

Incidentdiscovered Jul 27, 2023

Stated responseTook steps to secure its email system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov