MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedBiometricFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

OBI Seafoods, LLC

bd_2e2bc0ba4ccc39ed · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 16, 2024

Filed

Mar 19, 2025

To disclose

31 weeks

Affected

4,689state residents only

Linked

11 filings

Confidence

71%

Full breach record for OBI Seafoods, LLC →

OBI Seafoods, LLC reported a ransomware cyberattack in Washington affecting 4,689 individuals. The incident occurred between August 12-16, 2024, and was discovered on August 16, 2024. Compromised data included names and government IDs (SSN, Driver's License). OBI engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d31 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 4 days

discovery → filing · 31 weeks / 215 days

Aug 12, 2024

Begins

Aug 16, 2024

Discovered

Mar 19, 2025

Filed

vs. sector median

+23 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_588d4831a4ef495a2025-03-19Verified
Maine State AGbd_683f27165a0de4b32025-03-19Verified
Montana State AGbd_9ea0ce820edd92112025-03-19Verified
Maryland State AGbd_b4a8705c32c342ef2025-03-19Verified

Show 6 more filings ↓up to 7d gap

Oregon State AGbd_b4dd57c9e5fc45952025-03-19Verified
Massachusetts State AGbd_78f0eba83af222af2025-03-20 · +1dVerified
New Hampshire State AGbd_8f7fd5662095a6c72025-03-20 · +1dVerified
Vermont State AGbd_d2ab5e8bbc7cb5c72025-03-20 · +1dVerified
Indiana State AGbd_91e5af3efa2d068b2025-03-12 · +7dVerified
Nebraska State AGbd_f5e39d93cf18d8372025-03-12 · +7dVerified

Name: OBI Seafoods, LLC
norm: obi seafoods

Name: OBI Seafoods, LLC
norm: obi seafoods
Industry: Retail & Consumerllm

Discovered: Aug 16, 2024
Breach occurred: Aug 12, 2024 – Aug 16, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 19, 2025
Affected individuals: 4,689state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthPassport numberHealth insurance IDMedical informationBiometric data
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Engaged external cybersecurity specialists to assist with the investigation
Notified federal law enforcement of the incident
Offering complimentary credit monitoring and identity protection services
Changes made: Moved quickly and diligently to investigate the incident
Ensured the security of its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(215 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Indiana State AGMar 12 · first

Nebraska State AGMar 12 · first

California State AG+7d

Washington State AG+7d · this page

Massachusetts State AG+8d

New Hampshire State AG+8d

Vermont State AG+8d

Pattern: first filing Mar 12 (IN), last Mar 20 (VT) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA32749.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2025
Raw hash: 9bb5fdb82867832690fea97ab795cbbf4bf2670a9b98105bfa9513fa3c8812ee

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityOBI Seafoods, LLC

Victim entityOBI Seafoods, LLC

Incidentdiscovered Aug 16, 2024

Stated responseEngaged external cybersecurity specialists to assist with the investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com