MalwareTechnologyProfessional ServicesInformationRansomwareStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDHealth (basic)Financial accountCredentialsMediumContained

ARTECH

bd_eac9f3261c6d2e06 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 8, 2020

Filed

Sep 4, 2020

To disclose

34 weeks

Affected

18state residents only

Linked

8 filings

Confidence

65%

Full breach record for ARTECH →

Artech, LLC notified individuals of a ransomware incident. Unauthorized access occurred Jan 5-8, 2020, via an employee's compromised account. Personal data including SSNs, medical info, and payment card data were accessed. Artech engaged forensic investigators, reset credentials, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 34 weeks / 240 days

Jan 5, 2020

Begins

Jan 8, 2020

Discovered

Sep 4, 2020

Filed

vs. sector median

+16 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Washington State AGbd_1e11fb622714dc472020-09-04Verified
Massachusetts State AGbd_24d9edd9231d89db2020-09-04Verified
Oregon State AGbd_57710d633fe86de02020-09-04Verified
California State AGbd_d1f3a21e3489e7182020-09-04Verified

Show 3 more filings ↓up to 247d gap

New Hampshire State AGbd_0c183cf571c15ad32020-09-08 · +4dVerified
Indiana State AGbd_7fbc28b160ee71262020-01-13 · +235dVerified
Illinois State AGbd_683e8ea7ca24d30f2020-01-01 · +247dCandidate

Name: ARTECH
norm: artech-fr
Domain: artech.com

Name: ARTECH
norm: artech-fr
Domain: artech.com
Industry: TechnologyllmProfessional Servicesllm

Discovered: Jan 8, 2020
Breach occurred: Jan 5, 2020 – Jan 8, 2020
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 25, 2020
Affected individuals: 18state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial accountCredentials
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged a leading third-party forensic investigation firm
Notified law enforcement
Reset passwords for all Artech users
Strengthened existing technical controls
Implemented additional security measures
Reviewed policies and procedures relating to data security
Conducting additional employee training
Offering 12/24 months of credit monitoring and identity protection services through Kroll
Changes made: Strengthened existing technical controls
Implemented additional security measures
Reviewed policies and procedures relating to data security
Conducting additional employee training
Working with external digital forensic specialists to enhance existing security processes and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(240 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+12d

Washington State AG+247d

Massachusetts State AG+247d

Oregon State AG+247d

California State AG+247d

Montana State AG+247d · this page

New Hampshire State AG+251d

Pattern: first filing Jan 1 (IL), last Sep 8 (NH) — a 251-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Artech-Notification.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 4, 2020
Raw hash: a6d39ecbe2a909689aa67b37f8937158c1d634177e10ac53bed1aaf1055dc959

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityARTECH

Victim entityARTECH

Incidentdiscovered Jan 8, 2020

Stated responseEngaged a leading third-party forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov