MalwareRetail & ConsumerRetailRansomwareData EncryptedRansom DemandedIdentity (basic)Government IDFinancial accountMediumContained

KMG Prestige

bd_f23c18812ccad079 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 28, 2021

Filed

Feb 7, 2022

To disclose

10 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for KMG Prestige →

KMG Prestige, Inc. notified Montana residents of a ransomware incident discovered on November 28, 2021, impacting data likely accessed on November 27, 2021. Compromised data included names, driver's license numbers, SSNs, and health insurance info. The company engaged forensic experts and the FBI, restored systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 10 weeks / 71 days

Nov 27, 2021

Begins

Nov 28, 2021

Discovered

Feb 7, 2022

Filed

vs. sector median

+3 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterookbd_a8a84adf70cecc942021-12-07 · +62dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_9d94c03c9a6b9cac2022-02-07Verified by operator
Massachusetts State AGbd_a939718a990691d82022-02-07Verified
South Carolina State AGbd_d052e0ccc23cd2ee2022-02-07Verified
Massachusetts State AGbd_6f32a9a2303ecf182022-02-14 · +7dVerified by operator

Name: KMG Prestige
norm: kmg prestige

Name: KMG Prestige
norm: kmg prestige
Industry: Retail & Consumerllm

Discovered: Nov 28, 2021
Breach occurred: Nov 27, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Contacted the FBI

During the incident: Engaged outside counsel and third-party forensic experts
Contacted the FBI to seek assistance and guidance
Secured and safely restored systems and operations
Set up external, dedicated call center
Changes made: Implementing additional cybersecurity safeguards
Enhancing employee cybersecurity training
Improving cybersecurity policies, procedures, and protocols
Providing access to Single Bureau Credit Monitoring services at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Indiana State AGFeb 7 · first

Massachusetts State AGFeb 7 · first

South Carolina State AGFeb 7 · first

Montana State AGFeb 7 · first · this page

Massachusetts State AG+7d

Pattern: first filing Feb 7 (IN), last Feb 14 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-218.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2022
Raw hash: 9b6769029a3ba55766e297fc8995d2f989e76de7ad31c48db1d1f5d9940f61c1

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityKMG Prestige

Victim entityKMG Prestige

Incidentdiscovered Nov 28, 2021

Stated responseEngaged outside counsel and third-party forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov