Willis Lease Finance Corporation
bd_55d48d98a4973793 · schema v1 · pii pii-v1
Full breach record for Willis Lease Finance Corporation →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Black Basta on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Willis Lease Finance Corporation has been a pioneer and provider of aviation services for over 45 years. Launched by founder Charles Willis with the then new and radical idea to lease jet engines to commercial airlines, WLFC has since purchased, leased, and sold more engines in more countries over a longer period of time than any independent competitor. We offer one of the broadest product lines in the industry, including engine types from all major manufacturers, lease terms to meet any operational need, engine pools and engine financing, sale leasebacks, forward purchases, finance leases and engine management. As a pioneer in establishing cooperative engine sharing pools, our North American CFM56-7B Engine Sharing Pool provides services for more than 600 aircraft and continues to be the market leader.SITE: www.willislease.com www.wlfc.global Address : 4700 Lyons Technology Parkway Coconut Creek, Florida 33073 USA Tel: +1 561.349.9989ALL DATA SIZE: 910gb 1. CompanyFolders 2. Executive 3. Finance-Acctg 4. Human-Resources 5. Customers 6. Personnel 7. Users Shared Folders, Documents 8. Confidentiality & Nondisclosure Agrs and etc...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jan 31, 2024
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- SEC 8-Kbd_b994aca8f31b0f5c2024-02-09 · +9dVerified by operator
- Massachusetts State AGbd_975d9277d515db012024-08-13 · +195dVerified by operator
- Indiana State AGbd_9d2656612596501d2024-08-13 · +195dVerified by operator
Filing propagation · 3 filings · 2 states
View merged incident ↗Pattern: first filing Feb 9, last Aug 13 (IN) — a 186-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.