MalwareRetail & ConsumerRetailRansomwareRansom DemandedData ExfiltratedIdentity (basic)LowContained

DIAMOND COMIC DISTRIBUTORS, INC.

bd_13b79de725a1cca2 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 25, 2022

To disclose

—

Affected

5state residents only

Linked

4 filings

Confidence

66%

Full breach record for DIAMOND COMIC DISTRIBUTORS, INC. →

Diamond Comic Distributors, Inc. notified Montana residents of a ransomware attack occurring November 2-5, 2021. An unknown third party encrypted files and accessed personal information including names. The company engaged forensic investigators, notified law enforcement, and offered one year of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 2, 2021

Begins

Aug 25, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_78e939753eee8c622022-08-25Verified
Maine State AGbd_8c998ef8e380c8022022-08-25Verified
Indiana State AGbd_d4f7225fbd88646e2022-08-24 · +1dVerified

Name: DIAMOND COMIC DISTRIBUTORS, INC.
norm: diamond comic distributors

Name: DIAMOND COMIC DISTRIBUTORS, INC.
norm: diamond comic distributors
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 2, 2021 – Nov 5, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 5state-resident count only
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement

During the incident: Promptly took steps to secure our systems
Began an internal investigation
Notified law enforcement
Engaged a forensic security firm to investigate and confirm the security of our email and computer systems
Changes made: Enhancing our technical security measures
Eliminated older personal information housed in our data files
Offering a complimentary one-year membership of myTrueIdentity
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 24 · first

Massachusetts State AG+1d

Maine State AG+1d

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 25, 2022
Raw hash: cf3d8a3668e21766fa4a404a01c5212a305ba6943cf90292a041f0b1bc9aa968

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityDIAMOND COMIC DISTRIBUTORS, INC.

Victim entityDIAMOND COMIC DISTRIBUTORS, INC.

IncidentRansomware

Stated responsePromptly took steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov