MalwareAgriculture & FoodAgricultureRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)MediumContained

Ippolito International LP

bd_48bc396522797906 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 26, 2022

Filed

Oct 20, 2022

To disclose

25 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Ippolito International LP →

Ippolito International LP experienced a ransomware incident where an unauthorized actor accessed systems between April 18 and April 26, 2022, encrypting files. The incident affected vendors and employees of Ippolito and its managed farms (Coast King, Queen Victoria, Coastal View). Exposed data included Social Security numbers and names. The company notified the FBI, engaged forensic specialists, implemented additional network security measures, and offered one year of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

discovery → filing · 25 weeks / 177 days

Apr 18, 2022

Begins

Apr 26, 2022

Discovered

Oct 20, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Ippolito International LP
norm: ippolito international

Name: Ippolito International LP
norm: ippolito international
Industry: Agriculture & Foodllm

Discovered: Apr 26, 2022
Breach occurred: Apr 18, 2022 – Apr 26, 2022
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Took steps to secure our systems
Launched an investigation with the assistance of third-party computer specialists
Notified the Federal Bureau of Investigation of this event
Offering complimentary access to one-year of credit monitoring services through Equifax
Changes made: Reviewing our existing policies and procedures regarding cybersecurity
Evaluating additional measures and safeguards to protect against this type of event in the future
Implemented additional network security measures to further enhance our network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(177 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-558459
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2022
Raw hash: 71fe4ea676c5893b58e5db94295f8374a36423e660ff7f279993bfbb844b8a3e

Reporting entityIppolito International LP

Victim entityIppolito International LP

Incidentdiscovered Apr 26, 2022

Stated responseTook steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov