CNY Works, Inc.
bd_436088c01cac6fae · schema v1 · pii pii-v1
Full breach record for CNY Works, Inc. →CNY Works, Inc. notified Montana residents of a ransomware incident discovered on December 21, 2019. Malware encrypted files on several servers. Forensic investigation found no evidence of data exfiltration, but personal data was present in encrypted files. The company engaged external cybersecurity professionals, restored files from backups, and offered one year of complimentary credit monitoring via Experian IdentityWorks.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 21, 2019
Discovered
Jun 25, 2020
Filed
vs. sector median
+9 wks slower
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Indiana State AGbd_07c7077389320d802020-06-24 · +1dVerified
- New Hampshire State AGbd_ab7e3060cbb809792020-06-29 · +4dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Jun 24 (IN), last Jun 29 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.