DisclosureLens
MalwareTechnologyInformationRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDMediumActive

DAVACO

bd_611f04b0c24d36c8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 11, 2021

Filed

Jul 2, 2021

To disclose

21 days

Affected

29state residents only

Linked

7 filings

Confidence

66%
Full breach record for DAVACO

Davaco LP notified Montana residents of a ransomware attack discovered on June 11, 2021. The incident involved unauthorized network access, data encryption, and exfiltration of employee PII including SSNs and driver's licenses. Davaco engaged forensic investigators, notified the FBI, and offered credit monitoring services.

Incident timeline

discovery → filing · 21 days

Jun 11, 2021

Discovered

Jul 2, 2021

Filed

vs. sector median

16 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 17d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗

Pattern: first filing Jul 2 (IN), last Jul 19 (SC) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.