Smart scan

Point it at a matter: it detects document types, builds the chronology, and lists every party. Live.

Smart scan / 1008-00009

Lumos Analytics Inc Data Privacy 12 docs · open →

Document types detected

Analysis / memo5

Correspondence3

Filing / regulatory2

Other1

Engagement letter1

Parties across the matter

Company Overview Lumos Analytics IncCredential-Stuffing IncCustomer Success Lumos Analytics IncData Security IncDetailed IncHARKNESS LLPHarkness LLPInsured Lumos Analytics IncKendrick LLPLumos Analytics IncLumos Credential-Stuffing IncLumos IncNotification Lumos Analytics IncOakley LLP

Chronology

2025-01-01 · engagement-letter-lumos-breach-response.docx

… as the following key terms: • Policy Period: January 1, 2024 through January 1, 2025 • Coverage Limit: $15,000,000 per occurrence / $30,000,000 aggregate • Self-Insured Ret …

2025-01-01 · insurance-carrier-notice-letter.docx

… ("NexTier") to Lumos, with a policy period of January 1, 2024 through January 1, 2025. This notice of claim is being provided pursuant to the notice provisions set forth in th …

2024-09-27 · post-incident-remediation-closeout-memo.docx

… IDENTIAL ATTORNEY-CLIENT PRIVILEGE / ATTORNEY WORK PRODUCT MEMORANDUM September 27, 2024 FROM: Rachel Bernstein, Partner, and Sara Hendricks, Associate — Calderwood & Harkness LL …

2024-09-13 · multi-jurisdictional-notification-analysis-memo.docx

… of August 29, 2024. States with 60-day deadlines yield a deadline of September 13, 2024. The many states that require notification "in the most expedient time possible and witho …

2024-09-12 · response-to-garrison-oakley-demand-letter.docx

… 601 www.calderwoodharkness.com Privacy & Data Security Practice Group September 12, 2024 Via First-Class U.S. Mail and Electronic Mail Garrison & Oakley LLP 1500 Market Street, S …

2024-08-29 · multi-jurisdictional-notification-analysis-memo.docx

… e of August 14, 2024. Maryland's 45-day deadline yields a deadline of August 29, 2024. States with 60-day deadlines yield a deadline of September 13, 2024. The many states tha …

2024-08-29 · email-allison-cho-notification-timeline-coordination.eml

… 4** - **Maryland and similar states:** 45 days from determination → **August 29, 2024** - Most remaining states fall within 30- to 60-day windows, all of which close after Aug …

2024-08-28 · post-incident-remediation-closeout-memo.docx

… e pre-litigation demand letter received from Garrison & Oakley LLP on August 28, 2024. These recommendations are discussed in further detail in Section XII below. II. Backgrou …

2024-08-28 · response-to-garrison-oakley-demand-letter.docx

… adelphia, PA 19102 Re: Response to Pre-Litigation Demand Letter Dated August 28, 2024, on Behalf of Unnamed Putative Class of Users of the Lumos Insight Platform C&H Matter No …

2024-08-14 · multi-jurisdictional-notification-analysis-memo.docx

… within 30 days from the date of determination, yielding a deadline of August 14, 2024. Maryland's 45-day deadline yields a deadline of August 29, 2024. States with 60-day dead …

2024-08-14 · email-allison-cho-notification-timeline-coordination.eml

… lorado and Florida:** 30 days from the July 15 determination date → **August 14, 2024** - **Maryland and similar states:** 45 days from determination → **August 29, 2024** - M …

2024-08-05 · multi-jurisdictional-notification-analysis-memo.docx

… tifications (email and U.S. mail) to all 11,438 affected individuals: August 5, 2024 • AG filings with the 34 required state AG offices: August 1–5, 2024 • Enterprise custo …

2024-08-05 · email-allison-cho-notification-timeline-coordination.eml

… -- **2. Individual Notification Plan (U.S.)** - **Target send date: August 5, 2024** - **Total affected individuals: 11,438** (out of approximately 286,000 total registered …

2024-08-05 · ag-notification-letter-template.docx

… al notification. Individual notifications are being sent via email on August 5, 2024, to the email address on file for each affected individual. For a subset of 1,612 individ …

2024-08-05 · enterprise-customer-notification-letter-template.docx

… ANALYTICS INC. 450 Folsom Street, Suite 1200 San Francisco, CA 94105 August 5, 2024 [Customer Contact Name] [Customer Contact Title] [Customer Legal Name] [Customer Street A …

2024-08-05 · individual-notification-letter-template-us.docx

… ANALYTICS INC. 450 Folsom Street, Suite 1200 San Francisco, CA 94105 August 5, 2024 [First Name] [Last Name] [Street Address Line 1] [Street Address Line 2] [City], [State] …

2024-08-01 · email-allison-cho-notification-timeline-coordination.eml

… o have the enrollment portal live and activation codes generated by **August 1, 2024**. I spoke with Sentinel's project manager earlier this week, and they confirmed capacity …

2024-07-31 · email-allison-cho-notification-timeline-coordination.eml

… your final sign-off on the individual notification letter template by July 31, 2024**, so that Sentinel has adequate lead time for production and code generation ahead of th …

2024-07-30 · email-allison-cho-notification-timeline-coordination.eml

… ing developed in parallel, and Janelle expects drafts for review by **July 30, 2024**. I will circulate the drafts to you and Rachel for review and approval before they are …

2024-07-25 · email-allison-cho-notification-timeline-coordination.eml

… ; Priscilla Wynn ; Fiona Albrecht ; Jason Haddad Date: Thursday, July 25, 2024, 3:47 PM PDT Subject: Lumos Credential-Stuffing Incident — Notification Timeline and Coor …

2024-07-22 · board-investor-notification-memo.docx

… , General Counsel & Chief Privacy Officer, Lumos Analytics Inc. DATE: July 22, 2024 RE: Credential-Stuffing Incident Affecting the Lumos Insight Platform — Incident Summary, …

2024-07-22 · ag-notification-letter-template.docx

… rd has been compromised. Deployment of mandatory MFA was completed on July 22, 2024. 2. Advanced Bot-Detection and CAPTCHA. Lumos has deployed advanced bot-detection and CA …

2024-07-22 · enterprise-customer-notification-letter-template.docx

… inst the Platform. • Mandatory Multi-Factor Authentication (MFA): On July 22, 2024, Lumos completed the rollout of mandatory multi-factor authentication for all Insight Pla …

2024-07-22 · individual-notification-letter-template-us.docx

… tomated attack techniques. 4. Mandatory Multi-Factor Authentication (July 22, 2024). Lumos implemented mandatory multi-factor authentication ("MFA") for all Lumos Insight P …

2024-07-18 · multi-jurisdictional-notification-analysis-memo.docx

… e — Calderwood & Harkness LLP, Privacy & Data Security Practice DATE: July 18, 2024 RE: Multi-Jurisdictional Breach Notification Obligations Analysis — Credential-Stuffing I …

2024-07-15 · board-investor-notification-memo.docx

… ensic analysis of the incident. Palisade's final report, delivered on July 15, 2024, concluded the following: • There is no evidence of compromise to Lumos's internal syste …

2024-07-15 · multi-jurisdictional-notification-analysis-memo.docx

… calculating all statutory notification deadlines, we have identified July 15, 2024 as the determination date — the date on which Palisade Digital Forensics, Inc. ("Palisade …

2024-07-15 · post-incident-remediation-closeout-memo.docx

… Palisade delivered the final forensic investigation report to C&H on July 15, 2024, approximately four weeks after the engagement commenced. The final report was comprehens …

2024-07-15 · email-allison-cho-notification-timeline-coordination.eml

… rence, the determination date for notification-deadline purposes is **July 15, 2024** — the date Palisade Digital Forensics, Inc. delivered its final forensic investigation …

2024-07-15 · ag-notification-letter-template.docx

… eeks and was completed with the issuance of a final written report on July 15, 2024. For purposes of applicable state notification deadlines, July 15, 2024 constitutes the " …

2024-07-15 · enterprise-customer-notification-letter-template.docx

… attack. Palisade completed its final forensic investigation report on July 15, 2024. The key conclusions of the investigation are as follows: • No Compromise of Lumos Inter …

2024-07-08 · ag-notification-letter-template.docx

… r challenge suspicious automated traffic. Deployment was completed on July 8, 2024. 3. Authentication Rate-Limiting. Lumos has significantly reduced the authentication rat …

2024-07-08 · enterprise-customer-notification-letter-template.docx

… y Controls (June–July 2024) • Advanced Bot Detection and CAPTCHA: On July 8, 2024, Lumos deployed advanced bot-detection and CAPTCHA challenge mechanisms on the Insight Pl …

2024-07-08 · individual-notification-letter-template-us.docx

… the event of unauthorized account access. 3. Advanced Bot Detection (July 8, 2024). Lumos deployed advanced bot-detection and CAPTCHA technology on the Lumos Insight Platf …

2024-06-26 · preliminary-incident-assessment-memo.docx

… AND CONFIDENTIAL ATTORNEY WORK PRODUCT — DO NOT DISTRIBUTE MEMORANDUM June 26, 2024 TO: Allison Cho, General Counsel & Chief Privacy Officer, Lumos Analytics Inc. FROM: Sara …

2024-06-26 · post-incident-remediation-closeout-memo.docx

… mages. Palisade delivered a preliminary findings memorandum to C&H on June 26, 2024, eight days after engagement. The preliminary conclusions contained in that memorandum co …

2024-06-20 · preliminary-incident-assessment-memo.docx

… mal insurance claim was submitted to NexTier Cyber Insurance Group on June 20, 2024. As of the date of this memorandum, NexTier has acknowledged receipt of the claim submiss …

2024-06-20 · insurance-carrier-notice-letter.docx

… ity Practice Direct: (415) 392-7418 rbernstein@calderwoodharkness.com June 20, 2024 VIA EMAIL AND CERTIFIED MAIL, RETURN RECEIPT REQUESTED Martin Okubo Claims Adjuster NexTi …

2024-06-18 · board-investor-notification-memo.docx

… the Board's review. Calderwood & Harkness LLP ("C&H") was engaged on June 18, 2024, as outside breach response counsel to advise the Company in connection with the incident …

2024-06-18 · multi-jurisdictional-notification-analysis-memo.docx

… the other 42 states. • ICO 72-hour notification was already filed on June 18, 2024, within the required 72-hour window, by Harmon Watts & Kendrick LLP ("HWK") on behalf of …