Social EngineeringFinancial ServicesProfessional ServicesFinancePhishingTargetedPIIIdentity (basic)LowContained

BJA Partners

bd_e816bddbb4a8778c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 2, 2022

Filed

Feb 17, 2023

To disclose

37 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for BJA Partners →

BJA Partners (Brooks Jucha & Associates Insurance Services, Inc.) notified Montana residents of unauthorized access to an employee email account discovered on June 2, 2022. The incident involved phishing leading to email compromise. Affected data included names and other PII. BJA engaged forensic investigators, secured the account, and offered complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 37 weeks / 260 days

Jun 2, 2022

Discovered

Feb 17, 2023

Filed

vs. sector median

+28 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_393af0a1f8ae6d5a2023-02-17Candidate
Massachusetts State AGbd_acb488cae43285322023-02-17Verified
New Hampshire State AGbd_d7e391668646c6e82023-02-21 · +4dVerified

Name: BJA Partners
norm: bja partners

Name: BJA Partners
norm: bja partners
Also named: Brooks Jucha & Associates Insurance Services, Inc.dba oflegal entity
BJA Partnersdba oftrade name
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Jun 2, 2022
Materiality determined: —
Notification sent: Feb 17, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Secured the email account
Launched an investigation
Worked with a third-party forensic investigator
Performed a programmatic and manual review of the contents of the email account
Notified employer regarding this incident
Offering 12 months of complimentary access to credit monitoring services through Experian
Changes made: Reviewing policies, procedures, and processes related to the storage and access of sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(260 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGFeb 17 · first

Massachusetts State AGFeb 17 · first

Montana State AGFeb 17 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-81.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2023
Raw hash: 03fceab6c19c71aca78af5f51fa84f19e019ba1af9e06ca43f718aa742336809

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBJA Partners

Victim entityBJA Partners

Incidentdiscovered Jun 2, 2022

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov