HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowContained

Wold Architects & Engineers

bd_fb021add1dbdcb98 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 10, 2024

Filed

Jun 28, 2024

To disclose

11 weeks

Affected

3state residents only

Linked

5 records

Confidence

66%

Full breach record for Wold Architects & Engineers →

Wold Architects, Inc. disclosed a security incident discovered on April 10, 2024, where an unauthorized actor accessed files containing personal information. The company engaged cybersecurity specialists for forensic investigation and implemented additional security measures. Affected individuals were offered identity theft protection services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 11 weeks / 79 days

Apr 10, 2024

Discovered

Jun 28, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 5 records about the same incident.View merged incident

A leak claim by abyss about this victim was first seen 52 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteabyssbd_804077b7a13991962024-05-07 · +51dCandidate

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_3408c55326556eda2024-06-28Candidate
Massachusetts State AGbd_990d0306d7dad8782024-06-28Verified
Vermont State AGbd_ab27b95ae412b5f22024-06-28Verified

Name: Wold Architects & Engineers
norm: wold architects engineers
Domain: woldae.com

Name: Wold Architects & Engineers
norm: wold architects engineers
Domain: woldae.com
Industry: Professional Servicesllm

Discovered: Apr 10, 2024
Materiality determined: —
Notification sent: Apr 24, 2024
Affected individuals: 3state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took steps to secure the network
Launched an investigation, aided by cybersecurity specialists
Enlisted cybersecurity specialists to conduct a privileged forensic investigation
Implemented additional security measures
Changes made: Implemented additional security measures to help reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGJun 28 · first

Massachusetts State AGJun 28 · first

Vermont State AGJun 28 · first

Montana State AGJun 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1514.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2024
Raw hash: 0183ee2ec38faad6fe995feed42803795ec2040e3cdf541c1fb70594c15bcd63

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityWold Architects & Engineers

Victim entityWold Architects & Engineers

Incidentdiscovered Apr 10, 2024

Stated responseTook steps to secure the network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov