DisclosureLens
MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Duke Realty Corporation

bd_5a0939444fe81c0e · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 16, 2021

Filed

Aug 13, 2021

To disclose

28 days

Affected · nationwide

3,5202 in this filing

Linked

6 filings

Confidence

66%
Full breach record for Duke Realty Corporation

Duke Realty Corporation reported a ransomware/malware incident occurring between June 7, 2021, and July 18, 2021, discovered on July 16, 2021. The breach affected 3,520 individuals total, including 2 Maine residents. Personal information acquired included Social Security Numbers. Duke Realty provided 12 months of free credit monitoring and identity protection services through Equifax to affected Maine residents.

Maine clockDiscovered Jul 16, 2021Filed with AG Aug 13, 202128d ME AG ≤30d28 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 39 days
discovery → filing · 28 days

Jun 7, 2021

Begins

Jul 16, 2021

Discovered

Aug 13, 2021

Filed

vs. sector median

15 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 1d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.