MalwareOtherRansomwareCapture Stored DataData ExfiltratedEmployee Data InvolvedTargetedIdentity (basic)Government IDEmploymentMediumContained

FloForm Industries LLC

bd_5e29f214a29c39d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2021

Filed

Apr 13, 2021

To disclose

9 weeks

Affected

970state residents only

Linked

2 filings

Confidence

68%

Full breach record for FloForm Industries LLC →

FloForm Industries LLC reported a ransomware incident discovered on Feb 11, 2021, where an unauthorized third party encrypted its network and accessed employee PII (names, SSNs, pay). 970 Washington residents were notified on March 17, 2021. Forensic investigation confirmed data browsing by March 23. Remediation included credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 9 weeks / 61 days

Feb 11, 2021

Discovered

Apr 13, 2021

Filed

vs. sector median

+1 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_db04b3329eb49aa02021-04-13Verified

Name: FloForm Industries LLC
norm: floform industries

Name: FloForm Industries LLC
norm: floform industries
Industry: Otherllm

Discovered: Feb 11, 2021
Materiality determined: —
Notification sent: Mar 17, 2021
Affected individuals: 970state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: NameSocial Security number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General

During the incident: Engaged a forensic security firm to further investigate and confirm the security of its computer systems
Notified impacted residents of the situation by letter
Provided them with information on how they can protect themselves against fraudulent activity and identity theft
Changes made: Offering twelve (12) months of complimentary credit monitoring and identity theft protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGApr 13 · first

Washington State AGApr 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10446.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 13, 2021
Raw hash: 88600c4e1ac2a274fec037c2611176dc4e43f8e13d74f0bc6058572ea1ee766e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFloForm Industries LLC

Victim entityFloForm Industries LLC

Incidentdiscovered Feb 11, 2021

Stated responseEngaged a forensic security firm to further investigate and confirm the security of its computer systems

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com