Ursus, Inc.

Ursus Holdings, LLC experienced a data breach after employees fell victim to a phishing email with a malicious attachment, leading to compromised credentials. The incident involved potential exposure of PII including SSNs, bank account numbers, and driver's license numbers stored in Google Mail and Docs. The company detected suspicious activity on April 25, 2016, and notified affected individuals on September 15, 2016.

Ursus Holdings, LLC notified Montana residents of a security incident discovered on April 25, 2016, where employee email credentials were compromised via phishing. While no customer PII was confirmed accessed, the compromised accounts contained PII including SSNs and financial data. Ursus provided 12 months of credit monitoring and identity repair services.

Ursus Holdings LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-09-12. 174 Massachusetts residents were affected. The report records the breach type as electronic.

Ursus Holdings, LLC notified the NH AG of a phishing incident where an employee's credentials were stolen, leading to unauthorized access to email accounts. Documents containing PII (names, SSNs) and financial data of 42 NH residents were accessed. Ursus isolated accounts, reset passwords, implemented MFA, and planned to offer credit monitoring.