HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Farmers Investment Co.

bd_f9c67a630a15967b · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 26, 2022

Filed

Jan 12, 2023

To disclose

20 weeks

Affected

30state residents only

Linked

6 filings

Confidence

64%

Full breach record for Farmers Investment Co. →

Farmers Investment Co. (dba Green Valley Pecan Company) notified Montana residents of a data security incident occurring around May 31, 2022. Unauthorized access to personal information was confirmed on August 26, 2022. The company engaged forensic investigators, reported the incident to the FBI, and offered credit monitoring services. The specific data types were redacted in the template.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 87 days

discovery → filing · 20 weeks / 139 days

May 31, 2022

Begins

Aug 26, 2022

Discovered

Jan 12, 2023

Filed

vs. sector median

+11 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_b978df6add4b1f2b2023-01-12Verified
New Hampshire State AGbd_17ec4b32883542e92023-01-18 · +6dVerified
Vermont State AGbd_50bb0fce4a58434a2023-01-18 · +6dVerified
Massachusetts State AGbd_e607be2c136f7cdc2023-01-18 · +6dVerified

Show 1 more filing ↓up to 6d gap

Maine State AGbd_f3a40b2609c59d412023-01-18 · +6dVerified

Name: Farmers Investment Co.
norm: farmers investment

Name: Farmers Investment Co.
norm: farmers investment
Industry: Financial Servicesllm

Discovered: Aug 26, 2022
Breach occurred: May 31, 2022
Undetected for: 87 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 12, 2023
Affected individuals: 30state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged a leading cybersecurity firm to assist with an investigation
Engaged a vendor to conduct a thorough and extensive review of potentially affected files
Reported the incident to the Federal Bureau of Investigation
Offering free of charge identity theft protection services through IDX
Changes made: Implemented additional measures to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(139 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJan 12 · first

Montana State AGJan 12 · first · this page

New Hampshire State AG+6d

Vermont State AG+6d

Massachusetts State AG+6d

Maine State AG+6d

Pattern: first filing Jan 12 (IN), last Jan 18 (ME) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-798.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 12, 2023
Raw hash: 8f4b92dffbff05a86888f30b4e5e3be75b156986a2d6adf896da6e647bec62a8

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityFarmers Investment Co.

Victim entityFarmers Investment Co.

Incidentdiscovered Aug 26, 2022

Stated responseEngaged a leading cybersecurity firm to assist with an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov