Social EngineeringInformationPhishingStolen CredentialsEmployee Data InvolvedIdentity (basic)EmploymentLowContained

WideOrbit, LLC

bd_fd505c7918b2539b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 30, 2021

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for WideOrbit, LLC →

WideOrbit LLC disclosed that an employee clicked a phishing email attachment on July 1, 2020, leading to unauthorized access of their email account by an unknown third party until approximately November 26, 2020. The mailbox contained personal information (name, email, address) of current and former employees, contractors, and their spouses/dependents. It is unknown if the data was viewed or acquired. The company engaged forensic experts, notified law enforcement, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 1, 2020

Begins

Jul 30, 2021

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_789d958c8d39c3922021-06-11 · +49dVerified
Indiana State AGbd_7f07871192a8547e2021-06-10 · +50dVerified
Montana State AGbd_908a27fb403b8cf52021-06-10 · +50dCandidate
New Hampshire State AGbd_f6e60b80cc094b092021-06-10 · +50dVerified

Name: WideOrbit, LLC
norm: wideorbit

Name: WideOrbit, LLC
norm: wideorbit

Discovered: —
Breach occurred: Jul 1, 2020 – Nov 26, 2020
Materiality determined: —
Notification sent: Jun 10, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Employment
Attack vector: Phishing
MITRE ATT&CK: T1566.001 Spearphishing AttachmentT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_attachment

During the incident: Engaged third-party cybersecurity experts to aid in our investigation
Informed law enforcement and will cooperate in any investigation they may pursue
Changes made: Providing additional training to our work force around phishing campaigns and security best practices
Reviewing and updating our data retention and handling practices
Considering additional tools and software to further harden our environment
Offering identity theft protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJun 10 · first

Montana State AGJun 10 · first

New Hampshire State AGJun 10 · first

Massachusetts State AG+1d

California State AG+50d · this page

Pattern: first filing Jun 10 (IN), last Jul 30 (CA) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-543399
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2021
Raw hash: 6f93fc9b0fe493ff7c5b961631316a7cd929e345fa957f892236ad9bd149e0c4

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWideOrbit, LLC

Victim entityWideOrbit, LLC

IncidentPhishing

Stated responseEngaged third-party cybersecurity experts to aid in our investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov