Sarku Japan
bd_2e9e3b153a51c8a6 · schema v1 · pii pii-v1
Full breach record for Sarku Japan →5 incidents on fileSarku Japan (d/b/a of Variable State Holding Company) disclosed that an unauthorized actor gained access to its systems between January 14, 2022, and February 6, 2022. The company discovered anomalous activity on February 6, 2022. Affected data includes names, addresses, dates of birth, and Social Security numbers. The company engaged third-party cybersecurity specialists and offered 12 months of identity monitoring through Kroll.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 14, 2022
Begins
Feb 6, 2022
Discovered
Aug 8, 2022
Filed
vs. sector median
+19 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_e82af6a75bb3e3f12022-08-08Verified
- Washington State AGbd_154978068a8580a42022-03-16 · +145dCandidate
- California State AGbd_3e7e01e462f64ab02022-03-16 · +145dVerified
- Maine State AGbd_676946af941027ba2022-03-16 · +145dVerified
Show 1 more filing ↓Show fewer ↑up to 145d gap
- Oregon State AGbd_6f1f4c9b26bfab192022-03-16 · +145dVerified
Filing propagation · 6 filings · 4 states
View merged incident ↗Pattern: first filing Mar 16 (WA), last Aug 8 (CA) — a 145-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.