DisclosureLens
GLOBALMalwareProfessional ServicesProfessional ServicesRansomwareWerewolvesRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

DAVID'S BRIDAL, LLC

bd_206d64bd4cdbe709 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Feb 14, 2024

To disclose

—

Affected

Not disclosed

Linked

13 records

Confidence

50%
Full breach record for DAVID'S BRIDAL, LLC →

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Werewolves on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Business ServicesDiscovered: 2024-02-16

Source: Ransomware.live

Post text · scraped from the leak site

David's Bridal — известная американская сеть свадебных магазинов, известная своим широким ассортиментом свадебных платьев, платьев для подружек невесты и платьев для особых случаев. Основанная в 1950 году, компания выросла из единственного магазина во Флориде до обширной сети, насчитывающей более 300 магазинов в США, Канаде, Великобритании, а также франчайзинговых магазинов в Мексике.Выручка компании оценивается в $2,2 млрд.На текущий момент мы обладаем очень ценными и важными данными, охватывающими значительный объем личной и корпоративной информации.850000$.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Feb 14, 2024

Claim posted

—

Corroborated · see linked filings

This record's own dates cannot anchor compliance clocks; see the linked filings.

Claim → filing

—

Compliance clock

Not assessable

This leak-site claim is one of 13 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 271d gap

Showing first 10 of 12 linked disclosures.

Filing propagation · 10 filings · 9 states

View merged incident ↗
Oregon State AGSep 13 · first
Massachusetts State AGSep 13 · first
Washington State AGSep 13 · first
Indiana State AGSep 13 · first
Montana State AGSep 13 · first
Maine State AGSep 13 · first
New Hampshire State AGSep 13 · first
Vermont State AGSep 13 · first

Pattern: first filing Sep 13 (OR), last Nov 11 (CA) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2023-05-18

werewolves

According to ransomware.live, WereWolves is a Russian-speaking ransomware group that emerged in May 2023, using a modified LockBit 3 (Black) encryptor, operating an unusual public website that actively recruits new members and offers a bug-bounty program with rewards up to $1 million, with at least 26 victims across Russia, the US, and Europe.

26 victims claimed globally26 tracked hereFull profile →