Threat video1:00
Baker Tilly Breach Exposes SSNs: Detection & IOCs
An unnamed third-party platform exposed Baker Tilly client SSNs and names; 9 detection rules, 8 IOCs and a free Splunk SPL rule map 5 ATT&CK techniques.
Read the full threat intel for Baker Tilly Breach Exposes SSNs: Detection & IOCs →
Chapters
- 0:00The hookBaker Tilly clients: 10,456 Texas residents affected.
- 0:06The storyBaker Tilly is sending breach notices.
- 0:13Attack pathA provider platform was reported as the source.
- 0:29AttributionNo threat actor is attributed.
- 0:33Indicators of compromise1 indicator to hunt: 1 URL.
- 0:39MITRE ATT&CK techniques5 ATT&CK techniques, from initial access to exfiltration.
- 0:43Remediation10 remediation steps are listed, 4 of them immediate.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Baker Tilly clients: 10,456 Texas residents affected.
0:07Baker Tilly is sending breach notices.
0:09An unauthorized actor obtained personal data.
0:14A provider platform was reported as the source.
0:17Client and dependent personal records were obtained.
0:20Baker Tilly contained it and notified law enforcement.
0:24Baker Tilly knows of no fraud tied to it.
0:29No threat actor is attributed. Confidence: low.
0:331 indicator to hunt: 1 URL.
0:395 ATT&CK techniques, from initial access to exfiltration.
0:4410 remediation steps are listed, 4 of them immediate.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.