GUESS?, LLC
bd_51f22e2136e6dd46 · schema v1 · pii pii-v1
Full breach record for GUESS?, LLC →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group DarkSide on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Feb 1, 2021
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_bc1b7eef14b508172021-07-09 · +158dVerified by operator
- Maine State AGbd_c316604e1deedfda2021-07-09 · +158dVerified
- California State AGbd_d16da922327a3ecd2021-07-09 · +158dVerified
- New Hampshire State AGbd_e514d0f72546771c2021-07-09 · +158dVerified
Show 1 more filing ↓Show fewer ↑up to 158d gap
- Massachusetts State AGbd_f799a3576eecd77c2021-07-09 · +158dVerified by operator
Filing propagation · 5 filings · 5 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
darkside
According to ransomware.live, Darkside ransomware group has started its operation in August of 2020 with the model of RaaS (Ransomware-as-a-Service). They have become known for their operations of large ransoms scale. They have announced that they prefer not to attack hospitals, schools, non-profits, and governments, but rather big organizations that can be able to pay large ransoms. Darkside ransomware group became very famous following the cyberattack of the Colonial Pipeline and Toshiba unit. The FBI finally terminate the Darkside operation and Managed to pull money from their wallets back.