Upper Merion Township
bd_4fff3189e4da9135 · schema v1 · pii pii-v1
Full breach record for Upper Merion Township →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Qilin on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
The Upper Merion Youth Wrestling Association (UMYWA) is a non-profit organization, which has been in existence for over 40 years. The wrestling club was formed with the purpose of introducing our communities youth into the sport of wrestling. ...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jan 15, 2024
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Vermont State AGbd_370202f8316b04562024-09-25 · +254dVerified
- Indiana State AGbd_8833350d87da4b712024-09-25 · +254dVerified
- Maine State AGbd_a4fecec24afa4c0e2024-09-25 · +254dVerified
- Montana State AGbd_f2ada2a21b0816752024-09-25 · +254dVerified
Show 2 more filings ↓Show fewer ↑up to 275d gap
- New Hampshire State AGbd_d092364ac345cdc92024-09-30 · +259dVerified by operator
- Massachusetts State AGbd_bd5c8875b48298d42024-10-16 · +275dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 25 (VT), last Oct 16 (MA) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
qilin
According to ransomware.live, Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.