Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumActive

Therapia Staffing

bd_f1a633b78de26230 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 27, 2020

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Therapia Staffing →

Therapia Staffing notified Montana residents of a data security incident in January involving suspicious emails containing employee personal information. The incident exposed names, dates of birth, and Social Security numbers. Therapia engaged Kroll for identity monitoring and reported the incident to law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 27, 2020

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_179816c040204d962020-05-27Verified
Massachusetts State AGbd_9a04d813c0e931952020-05-27Verified

Name: Therapia Staffing
norm: therapia staffing

Name: Therapia Staffing
norm: therapia staffing
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported to law enforcementpending criminal investigation
Initial access: phishing_link

During the incident: Forcing password changes
Re-educating our staff about how to identify and prevent malicious emails
Reporting the incident to government regulators
Securing the services of Kroll to provide identity monitoring services
Changes made: Re-educating our staff about how to identify and prevent malicious emails
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMay 27 · first

Massachusetts State AGMay 27 · first

Montana State AGMay 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-90.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 27, 2020
Raw hash: f40e06a42443af0b9e37a9323c743061b731eb3a7b685c37e1b5010743a3e1c9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTherapia Staffing

Victim entityTherapia Staffing

IncidentPhishing

Stated responseForcing password changes

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov