MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

PAL Card Minnesota, LLC

bd_0145811d7119b6fe · schema v1 · pii pii-v1

Full breach record for PAL Card Minnesota, LLC →

PAL Card Minnesota, LLC experienced a ransomware attack on September 28, 2021. A cybercriminal gained access to computer systems, encrypted data, and exfiltrated personal information including names, addresses, phone numbers, email addresses, PAL account numbers, driver's license numbers, social security numbers, and passport numbers. The company restored data from backups, engaged cybersecurity experts, notified law enforcement, and offered one year of identity monitoring via Epiq.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_d5952e2686acb399Maine State AGfiled 2021-11-19Verified
bd_0dfc9a7f2037d825Oregon State AGfiled 2021-11-22(3d gap)Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-547799
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 19, 2021
Raw hash: 339f6bf7158b7d9bd24a6a506e45adac83591ad667968f8806de4aef06265160

Reporting entity

Name: PAL Card Minnesota, LLC
norm: pal card minnesota

Victim entity

Name: PAL Card Minnesota, LLC
norm: pal card minnesota

Incident

Discovered: Sep 28, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Informed law enforcement

Compliance

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.