DisclosureLens
MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Columbia Machine, Inc.

bd_56b5dec16da3b3f2 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 5, 2026

Filed

Jul 9, 2026

To disclose

14 weeks

Affected

1,276state residents only

Linked

2 filings

Confidence

66%
Full breach record for Columbia Machine, Inc. →

Columbia Machine, Inc. notified Washington residents of a cybersecurity incident where unauthorized access occurred between March 27 and April 5, 2026. The attacker encrypted data and exfiltrated files containing personal information, including names, SSNs, and driver's license numbers. 1,276 Washington residents were notified on July 9, 2026. The company engaged forensic specialists, reported to law enforcement, and provided 24 months of credit monitoring.

Washington clock✗ WA AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 9 days
discovery → filing · 14 weeks / 95 days

Mar 27, 2026

Begins

Apr 5, 2026

Discovered

Jul 9, 2026

Filed

vs. sector median

+3 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
Washington State AGJul 9 · first
Washington State AGJul 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.