MalwareRansomwareData ExfiltratedRansom DemandedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
DAVACO
bd_6400a333d4483ff5 · schema v1 · pii pii-v1
Full breach record for DAVACO →Davaco LP experienced a ransomware attack on June 11, 2021, where an unauthorized individual gained access to the network and exfiltrated employee data, including names, Social Security numbers, and driver's license numbers. The company engaged forensic investigators, notified the FBI, and is offering credit monitoring services to affected employees. The investigation is ongoing.
California clockDiscovered Jun 11, 2021 → Notified Jul 2, 202121d ✓ CA 60-day OK5 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_60b3867f0b16a8faMaine State AGfiled 2021-07-19Verified
- bd_cfb65246deff18d4South Carolina State AGfiled 2021-07-19Verified
- bd_5ae29a746abaf7a0New Hampshire State AGfiled 2021-07-16(3d gap)Verified
- bd_611f04b0c24d36c8Montana State AGfiled 2021-07-02(17d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-543040
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2021
- Raw hash
- 58f93964d0d193d54e25f236e36c3c48d0beb082e7ab8a229c14a254a288c492
Reporting entity
- Name
- DAVACOnorm: davaco
- Domain
- davaco.com
Victim entity
- Name
- DAVACOnorm: davaco
- Domain
- davaco.com
Incident
- Discovered
- Jun 11, 2021
- Materiality determined
- —
- Notification sent
- Jul 2, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBI
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 21d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 11, 2021→ Notified: Jul 2, 202121d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.