FEDERALItem 1.05 · mandatoryMalwareRetail & ConsumerRetailHome CentersRansomwareStolen CredentialsData ExfiltratedData EncryptedRansom DemandedTargetedFinancialIP / systemPIILowContained

Jewett-Cameron Trading Company Ltd.

bd_455d40431dda69e5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2025

Filed

Oct 21, 2025

To disclose

6 days

Affected

Not disclosed

Confidence

66%

Full breach record for Jewett-Cameron Trading Company Ltd. →

Jewett-Cameron Trading Company Ltd. disclosed a material cybersecurity incident on Oct 15, 2025, involving unauthorized access and ransomware deployment. Threat actors exfiltrated data, including images of video meetings and financial information prepared for SEC filings, and demanded payment. The company contained the intrusion, took systems offline, and engaged forensic experts. No PII compromise confirmed yet.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 days

Oct 15, 2025

Discovered

Oct 21, 2025

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Jewett-Cameron Trading Company Ltd.
norm: jewett cameron trading
SEC CIK: 0000885307

Name: Jewett-Cameron Trading Company Ltd.
norm: jewett cameron trading
SEC CIK: 0000885307
Industry: Retail & Consumernaics map
NAICS 444110 · Home Centers

Discovered: Oct 15, 2025
Materiality determined: Oct 21, 2025
Notification sent: Oct 21, 2025
Affected individuals: Not disclosed
Data types: FinancialIP / systemPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement

During the incident: Activated its cyber incident response process to contain the intrusion, assess and investigate the incident and implement remedial measures
Notified law enforcement
Retained external cybersecurity experts to assist
Voluntarily took offline portions of its business applications supporting aspects of its operations and corporate functions as a precautionary measure
Closing off the point of unlawful access
Bolstering its cyber defensive capabilities
Changes made: Bolstering its cyber defensive capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/885307/000107997325001631/jctc_8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Oct 21, 2025
Raw hash: 9198aaf65d099303743635b0c00a2625736278ae86c06d976f212d1c4de81a5a

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html28.2 KB

Download View at source

Reporting entityJewett-Cameron Trading Company Ltd.

Victim entityJewett-Cameron Trading Company Ltd.

Incidentdiscovered Oct 15, 2025

Stated responseActivated its cyber incident response process to contain the intrusion, assess and investigate the incident and implement remedial measures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing