Social EngineeringProfessional ServicesProfessional ServicesPhishingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PIIMediumContained

Miller Kaplan Arase, LLP

bd_e476626cdbaaecf2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 22, 2019

Filed

Jul 10, 2019

To disclose

16 weeks

Affected

7state residents only

Linked

4 filings

Confidence

66%

Full breach record for Miller Kaplan Arase, LLP →

Miller Kaplan Arase, LLP notified Montana AG of a March 2019 incident where an unauthorized individual accessed an employee's email account. The breach potentially exposed names, SSNs, DOBs, financial account numbers, and health insurance info. MKA engaged forensic investigators, notified the FBI, reset passwords, implemented MFA, and offered 36 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 110 days

Mar 22, 2019

Discovered

Jul 10, 2019

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_4f10e00deda866be2019-07-10Verified
California State AGbd_8a229e0f9ef9779a2019-07-10Verified
California State AGbd_a295f1709ecb68e72019-09-11 · +63dVerified

Name: Miller Kaplan Arase, LLP
norm: miller kaplan arase

Name: Miller Kaplan Arase, LLP
norm: miller kaplan arase
Industry: Professional Servicesllm

Discovered: Mar 22, 2019
Materiality determined: —
Notification sent: Jul 10, 2019
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported matter to the FBIReported matter to local law enforcement
Initial access: phishing_link

During the incident: Engaged an independent forensics firm
Secured all MKA email accounts
Reported the matter to the FBI and to local law enforcement
Retained a third-party recovery services expert to assist with providing notification
Reset account passwords
Implemented multi-factor authentication for remote email access
Provided employees additional training
Changes made: Reviewing policies and procedures to further enhance the security of personal information
Offering complimentary credit monitoring and identity protection services through ID Experts’ MyIDCare for 36 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 10 · first

California State AGJul 10 · first

Montana State AGJul 10 · first · this page

California State AG+63d

Pattern: first filing Jul 10 (MA), last Sep 11 (CA) — a 63-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-28.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2019
Raw hash: f55b6afdef36fc6568a540b680ec649f474c411ae95c6a4a314c52a1fb4e9763

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMiller Kaplan Arase, LLP

Victim entityMiller Kaplan Arase, LLP

Incidentdiscovered Mar 22, 2019

Stated responseEngaged an independent forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov