MalwareHealthcareProfessional ServicesHealthcareRansomwareData EncryptedIdentity (basic)Government IDFinancial accountMediumContained

Bosley, Inc.

bd_e640a3e9f964b9b2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 17, 2020

Filed

Jan 26, 2021

To disclose

23 weeks

Affected

162state residents only

Linked

6 filings

Confidence

65%

Full breach record for Bosley, Inc. →2 incidents on file

Bosley, Inc. notified Montana residents of a ransomware incident on August 17, 2020, where malware encrypted data on certain computer systems. An unauthorized party gained access to systems containing customer and patient personal information, including names, SSNs, driver's license numbers, and financial account data. Bosley contained the incident, restored systems from backups, engaged a cybersecurity firm, and offered one year of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 23 weeks / 162 days

Aug 17, 2020

Begins

Aug 17, 2020

Discovered

Jan 26, 2021

Filed

vs. sector median

+11 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitepysabd_3cdd2df174f8beb92021-09-09 · +226dVerified by operator

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_c64f1b8d6de8d4442021-01-26Verified by operator
Indiana State AGbd_cb4d3e6b46d59d2e2021-01-26Verified by operator
Washington State AGbd_d120ef18cab32d852021-01-26Verified
California State AGbd_e126f8548db710b82021-01-26Candidate

Name: Bosley, Inc.
norm: bosley
Domain: bosley.com

Name: Bosley, Inc.
norm: bosley
Domain: bosley.com
Industry: HealthcarellmProfessional Servicesllm

Discovered: Aug 17, 2020
Breach occurred: Aug 17, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 24, 2020
Affected individuals: 162state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Identified and contained the incident
Restored systems from available backups
Launched an investigation with the assistance of a cybersecurity firm
Offering a complimentary one-year membership from myTrueIdentity through TransUnion Interactive
Updating user passwords
Implementing additional security safeguards and controls in our network infrastructure
Changes made: Updating user passwords
Implementing additional security safeguards and controls in our network infrastructure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(162 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Oregon State AGJan 26 · first

Indiana State AGJan 26 · first

Washington State AGJan 26 · first

California State AGJan 26 · first

Montana State AGJan 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Bosley-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2021
Raw hash: c3006694904637bdabcc3b4973eb174fcc38c5f35b8b3d52526b59da7a60b265

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityBosley, Inc.

Victim entityBosley, Inc.

Incidentdiscovered Aug 17, 2020

Stated responseIdentified and contained the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov