MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedRansom DemandedCustomer Data InvolvedPIIIdentity (basic)LowContained

Santoro Whitmire, LTD

bd_19718cf69cd36a64 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 11, 2024

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Santoro Whitmire, LTD →

Santoro Whitmire, LTD experienced a ransomware attack after permanently closing its business. The incident occurred on December 12, 2023. The firm notified law enforcement and contained the incident. Investigation revealed potential access to personal information including names and addresses. The firm offered identity protection services through IDX. No specific count of affected individuals was disclosed in the filing.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 12, 2023

Begins

Jun 11, 2024

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_3011f18d199b1d422024-06-11Verified
Maine State AGbd_53a0f94f519df75f2024-06-11Verified
Vermont State AGbd_981104376d93d7ff2024-06-11Verified
Indiana State AGbd_a838817f2ee1274e2024-06-11Verified

Show 1 more filing ↓up to 1d gap

Massachusetts State AGbd_4098a976fde7f2812024-06-12 · +1dVerified

Name: Santoro Whitmire, LTD
norm: santoro whitmire

Name: Santoro Whitmire, LTD
norm: santoro whitmire
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 12, 2023
Materiality determined: —
Notification sent: Jun 11, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Notified law enforcement
Contained the incident
Conducted a thorough investigation with the assistance of computer forensic experts
Secured the services of IDX, a ZeroFox Company, for data breach and recovery services
Provided credit and CyberScan monitoring, insurance reimbursement policy, and id theft recovery services
Changes made: Implemented enhanced security measures
Implemented enhanced oversight of third-party vendors
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGJun 11 · first

Maine State AGJun 11 · first

Vermont State AGJun 11 · first

Indiana State AGJun 11 · first

California State AGJun 11 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-586814
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2024
Raw hash: 45a023bafd192f3bac83d6b983824191eb604a790ef543284703e63da6ed3156

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySantoro Whitmire, LTD

Victim entitySantoro Whitmire, LTD

IncidentRansomware

Stated responseNotified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov