DisclosureLens
MalwareTechnologyInformationRansomwareData EncryptedData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Mity, Inc.

bd_4ab56233b47c3c87 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 6, 2024

Filed

Jan 27, 2025

To disclose

47 weeks

Affected

3state residents only

Linked

3 filings

Confidence

66%
Full breach record for Mity, Inc. →2 incidents on file

Mity Inc. notified Idaho AG of a ransomware attack discovered on March 6, 2024, affecting 3 Idaho residents. Personal information including names, addresses, SSNs, and Social Insurance Numbers was accessed and encrypted. Mity engaged law enforcement and incident response professionals. Notices were mailed to affected individuals on January 17, 2025, offering 12 months of credit monitoring.

Incident timeline

discovery → filing · 47 weeks / 327 days

Mar 6, 2024

Begins

Mar 6, 2024

Discovered

Jan 27, 2025

Filed

vs. sector median

+36 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGJan 17 · first
Idaho State AG+10d · this page

Pattern: first filing Jan 17 (IN), last Jan 27 (ID) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.