Social EngineeringTechnologyInformationPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

talentReef Inc

bd_f5bca5716c27c321 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 29, 2017

Filed

Jan 9, 2018

To disclose

6 weeks

Affected

6state residents only

Linked

5 filings

Confidence

66%

Full breach record for talentReef Inc →

talentReef, Inc. notified Montana residents of a data breach discovered on November 29, 2017, where an unauthorized individual accessed an employee's email account containing personal information including names and addresses. The company reset passwords, engaged forensic investigators, and offered 12 months of credit monitoring via ID Experts.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 41 days

Nov 29, 2017

Discovered

Jan 9, 2018

Filed

vs. sector median

5 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_0d3d9378bd39536f2018-01-10 · +1dVerified
Massachusetts State AGbd_129abea3e0a28a552018-01-10 · +1dVerified
Washington State AGbd_c271081b5572348b2018-01-10 · +1dVerified
New Hampshire State AGbd_df4e97d1a086d73c2018-01-10 · +1dVerified

Name: talentReef Inc
norm: talentreef

Name: talentReef Inc
norm: talentreef
Industry: Technologyllm

Discovered: Nov 29, 2017
Materiality determined: —
Notification sent: Jan 9, 2018
Affected individuals: 6state-resident count only
Data types: Identity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Reset account passwords
Began an investigation utilizing the services of a third party forensic investigation firm
Changes made: Taken steps to increase the security strength of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJan 9 · first · this page

California State AG+1d

Massachusetts State AG+1d

Washington State AG+1d

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/talentReef-Inc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2018
Raw hash: e2585ad32a4cb093e73c500b540967809dfcee6ada03184d53d8880042b23837

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitytalentReef Inc

Victim entitytalentReef Inc

Incidentdiscovered Nov 29, 2017

Stated responseReset account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov