HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDMediumContained

Little Rock Advertising and Promotion Commission

bd_f8e896d2ab421614 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 28, 2021

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Little Rock Advertising and Promotion Commission →

Little Rock Advertising and Promotion Commission notified Montana residents of unauthorized network access between Nov 19-22, 2020. SSNs were exfiltrated. Investigation concluded June 28, 2021. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 19, 2020

Begins

Jul 28, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_e99d512d33aea0ec2021-07-28Verified
Massachusetts State AGbd_fb46923b9d3f61cf2021-07-28Verified

Name: Little Rock Advertising and Promotion Commission
norm: little rock advertising and promotion commission

Name: Little Rock Advertising and Promotion Commission
norm: little rock advertising and promotion commission
Industry: Governmentllm

Discovered: —
Breach occurred: Nov 19, 2020 – Nov 22, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering a complimentary one-year membership of Experian IdentityWorksTM Credit 3B
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJul 28 · first

Massachusetts State AGJul 28 · first

Montana State AGJul 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-21.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2021
Raw hash: 75e6b60d1763645ae81243fbc4ca7f22b6005b87989121726cd2a1b0a9f374fd

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLittle Rock Advertising and Promotion Commission

Victim entityLittle Rock Advertising and Promotion Commission

IncidentUnauthorized Access

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov