DisclosureLens
HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedTargetedFinancial accountIdentity (basic)Government IDPHIPIIHealth (basic)HighContained

DISA Global Solutions, Inc.

bd_5d6c5c4a512d44c4 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 22, 2024

Filed

Feb 24, 2025

To disclose

44 weeks

Affected

29,481state residents only

Linked

14 filings

Confidence

69%
Full breach record for DISA Global Solutions, Inc. →

DISA Global Solutions, Inc. issued a supplemental notice to the Washington AG regarding a cybersecurity incident. Unauthorized access occurred between Feb 9 and Apr 22, 2024. DISA discovered the incident on Apr 22, 2024, after forensic investigation. Notification letters were sent to Washington residents starting Feb 21, 2025. The incident involved unauthorized access to a limited portion of the network, potentially exposing PII such as names. 29,481 Washington residents were affected. DISA engaged forensic experts, notified law enforcement, and provided 12 months of credit monitoring via Experian.

Washington clock✗ WA AG >90d44 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 73 days
discovery → filing · 44 weeks / 308 days

Feb 9, 2024

Begins

Apr 22, 2024

Discovered

Feb 24, 2025

Filed

vs. sector median

+25 wks slower

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 17d gap

Showing first 10 of 13 linked disclosures.

Filing propagation · 11 filings · 9 states

View merged incident ↗
Delaware State AGFeb 21 · first
Maryland State AGFeb 21 · first
Indiana State AGFeb 21 · first
Massachusetts State AG+1d
California State AG+3d
Vermont State AG+3d
Maine State AG+3d
Washington State AG+3d · this page
Rhode Island State AG+10d
California State AG+17d
Rhode Island State AG+20d

Pattern: first filing Feb 21 (DE), last Mar 13 (RI) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.