MalwareOtherRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDPHIMediumContained

Sierra Air Conditioning

bd_e564e040009fa7f2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 29, 2021

Filed

Sep 24, 2021

To disclose

12 weeks

Affected

1state residents only

Linked

2 filings

Confidence

63%

Full breach record for Sierra Air Conditioning →

Sierra Air Conditioning (SAC) disclosed a cybersecurity incident occurring on June 28, 2021, involving unauthorized system encryption (ransomware). SAC detected the incident on June 29, 2021, and engaged forensic investigators. The breach potentially exposed employee data including names, contact info, DOB, SSNs, and health insurance information. Data exfiltration was confirmed. SAC provided credit monitoring and implemented security upgrades including MFA and next-gen firewalls.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 12 weeks / 87 days

Jun 28, 2021

Begins

Jun 29, 2021

Discovered

Sep 24, 2021

Filed

vs. sector median

+4 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_c200819efad0b9852021-09-24Verified

Name: Sierra Air Conditioning
norm: sierra air conditioning

Name: Sierra Air Conditioning
norm: sierra air conditioning
Industry: Otherllm

Discovered: Jun 29, 2021
Breach occurred: Jun 28, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPHI
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified state regulators

During the incident: SAC retained a specialized cybersecurity forensic team to conduct an investigation
SAC has procured credit monitoring for affected individuals
Drafted notices to individuals, consumer credit reporting agencies, and state regulators
Changes made: Upgrading our firewall to a next generation firewall
Deployed a security operations center to monitor the network for suspicious activity
Upgraded the anti-virus software to a product that includes extended detection and response
Installed software to help discard unneeded files to reduce the data footprint
Established multifactor authentication for all remote users
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGSep 24 · first

Montana State AGSep 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Data-Breach-Notification-13.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 24, 2021
Raw hash: da8005c7c79545973fb8f53a72fd5ebea57543adc27cf433dd3c98e239631d7e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySierra Air Conditioning

Victim entitySierra Air Conditioning

Incidentdiscovered Jun 29, 2021

Stated responseSAC retained a specialized cybersecurity forensic team to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov