Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPIIMediumContained

Southeastern Financial

bd_e4325288842493d3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 14, 2022

Filed

Oct 19, 2022

To disclose

27 weeks

Affected

1state residents only

Confidence

67%

Full breach record for Southeastern Financial →

Southeastern Financial and Royal Alliance notified clients of a security incident involving unauthorized access to an employee email account via phishing. Compromised data included names, addresses, DOB, driver's license numbers, financial account numbers, and SSNs. Kroll identity monitoring was offered. Investigation launched April 14, 2022.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 weeks / 188 days

Apr 14, 2022

Discovered

Oct 19, 2022

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Royal Alliance Associates, Inc.
norm: royal alliance

Name: Southeastern Financial
norm: southeastern financial
Industry: Financial Servicesllm

Discovered: Apr 14, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Implemented additional measures to enhance our existing security protocols
Re-educating our staff for awareness on these types of incidents
Took immediate steps to secure the account
Changes made: Implemented additional measures to enhance our existing security protocols
Re-educating our staff for awareness on these types of incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(188 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-629.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 19, 2022
Raw hash: e73785b3ad364ee7c2cf6d669d469a946f05c43a4729f828631a58ed66234d30

Reporting entityRoyal Alliance Associates, Inc.

Victim entitySoutheastern Financial

Incidentdiscovered Apr 14, 2022

Stated responseSecured the services of Kroll to provide identity monitoring at no cost to you for one year

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov