HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedIdentity (basic)LowContained

Black, Gould & Associates

bd_f3c08bc45e188675 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 9, 2022

Filed

Dec 5, 2022

To disclose

12 weeks

Affected

18state residents only

Linked

5 filings

Confidence

64%

Full breach record for Black, Gould & Associates →

Black, Gould & Associates, Inc. notified Montana residents of unauthorized access to its systems between August 31 and September 10, 2022. The incident was discovered on September 9, 2022. Personal information, including names, was accessed. The company engaged forensic specialists, secured systems, and offered identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 9 days

discovery → filing · 12 weeks / 87 days

Aug 31, 2022

Begins

Sep 9, 2022

Discovered

Dec 5, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_0479658b2be9cddb2022-12-05Candidate
Indiana State AGbd_ae29c8b5786749782022-12-05Verified
California State AGbd_e2d61f62b61576ab2022-12-05Verified
New Hampshire State AGbd_cb1f2d66d39bb5af2022-12-09 · +4dVerified

Name: Black, Gould & Associates
norm: black gould associates

Name: Black, Gould & Associates
norm: black gould associates
Industry: Professional Servicesllm

Discovered: Sep 9, 2022
Breach occurred: Aug 31, 2022 – Sep 10, 2022
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 5, 2022
Affected individuals: 18state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Promptly took steps to secure our systems
With the assistance of third-party forensic specialists, conducted an investigation
Rotating passwords
Conducting a diligent investigation aided by third-party forensic specialists
Implemented additional technical security measures
Reviewing and enhancing existing data privacy policies and procedures
Providing you with access to 12/24 months of complimentary identity monitoring and restoration services through IDX
Changes made: Implemented additional technical security measures designed to mitigate recurrence of this type of incident
Reviewing and enhancing existing data privacy policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 5 · first

Indiana State AGDec 5 · first

California State AGDec 5 · first

Montana State AGDec 5 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-765.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 5, 2022
Raw hash: aab0420a66fe177c649747f4c31012285d044aded99cfb55c2a088563cd4bb31

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBlack, Gould & Associates

Victim entityBlack, Gould & Associates

Incidentdiscovered Sep 9, 2022

Stated responsePromptly took steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov