DisclosureLens
HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDEmploymentMediumActive

Krapf Group

bd_568291789eb998b0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 23, 2020

Filed

Jan 15, 2021

To disclose

8 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%
Full breach record for Krapf Group

The Krapf Group experienced a cybersecurity incident where an unauthorized actor accessed its network on or around November 17, 2020, and exfiltrated personal information including names, dates of birth, addresses, and Social Security numbers. The breach was discovered on November 23, 2020. The company engaged forensic investigators and is offering one year of Experian IdentityWorks monitoring to affected individuals. The investigation was ongoing as of the January 15, 2021 notification date.

Incident timeline

undetected · 6 days
discovery → filing · 8 weeks / 53 days

Nov 17, 2020

Begins

Nov 23, 2020

Discovered

Jan 15, 2021

Filed

vs. sector median

11 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 14d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Illinois State AGJan 1 · first
Delaware State AG+14d · this page

Pattern: first filing Jan 1 (IL), last Jan 19 (PA) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.