Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedData ExfiltratedIdentity (basic)PIILowContained

Diversified Financial Services, LLC

bd_eb9bf540a9e07362 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 4, 2021

Filed

Sep 2, 2021

To disclose

29 days

Affected

18state residents only

Linked

4 filings

Confidence

66%

Full breach record for Diversified Financial Services, LLC →

Diversified Financial Services, LLC notified Montana residents of a phishing incident where an employee's email account was compromised between March 19 and June 14, 2021. The attack was discovered on August 4, 2021. PII including names and demographics was accessed. DFS engaged forensic experts, reset credentials, and provided credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 138 days

discovery → filing · 29 days

Mar 19, 2021

Begins

Aug 4, 2021

Discovered

Sep 2, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_a90495fb71bfeaf42021-09-03 · +1dVerified
Indiana State AGbd_eb8386ff417d791d2021-09-03 · +1dVerified
Maine State AGbd_1a352dde3d0aecb02021-09-09 · +7dVerified by operator

Name: Diversified Financial Services, LLC
norm: diversified financial

Name: Diversified Financial Services, LLC
norm: diversified financial
Industry: Financial Servicesllm

Discovered: Aug 4, 2021
Breach occurred: Mar 19, 2021 – Jun 14, 2021
Undetected for: 138 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 18state-resident count only
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Hired an outside forensic computer expert
Temporarily disabling the user’s account
Performed a password reset
Strengthening the technical procedures to access the account
Deploying additional technologies designed to prevent similar attacks
Disabling old or unused access protocols
Updating monitoring software
Establishing new alert protocols
Providing expanded training for employees
Arranged for credit monitoring service through TransUnion
Changes made: Disabling old or unused access protocols
Updating monitoring software
Establishing new alert protocols
Providing expanded training for employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGSep 2 · first · this page

Massachusetts State AG+1d

Indiana State AG+1d

Maine State AG+7d

Pattern: first filing Sep 2 (MT), last Sep 9 (ME) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-100.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 2, 2021
Raw hash: e76091df9594e122c373d9752de30de65b6818708f7070cbdb10e498aca3e102

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityDiversified Financial Services, LLC

Victim entityDiversified Financial Services, LLC

Incidentdiscovered Aug 4, 2021

Stated responseHired an outside forensic computer expert

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov