MalwareTechnologyInformationRansomwareData EncryptedRansom DemandedEmployee Data InvolvedFinancial accountIdentity (basic)Government IDMediumContained

Ampex Data Systems

bd_68635f5ae613817a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 21, 2026

Filed

May 19, 2026

To disclose

8 weeks

Affected

6state residents only

Linked

7 filings

Confidence

65%

Full breach record for Ampex Data Systems →

Ampex Data Systems Corporation experienced a ransomware incident on March 21, 2026, where a threat actor accessed and encrypted network servers. The incident affected current and former contractors, employees, and dependents, potentially exposing names, addresses, SSNs, dates of birth, and limited driver's license or banking information. The company contained the incident by March 23, 2026, and is offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d8 weeks discovery → filing

Incident timeline

discovery → filing · 8 weeks / 59 days

Mar 21, 2026

Begins

Mar 21, 2026

Discovered

May 19, 2026

Filed

vs. sector median

10 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteplaybd_571e436d5a1335c12026-03-30 · +49dVerified
Leak Siteplaybd_cde8e1e1cbada45f2026-01-12 · +127dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_6c8fa41d68c176072026-05-18 · +1dVerified by operator
Nebraska State AGbd_f61a1973de4b25352026-05-26 · +7dVerified
California State AGbd_5a80584f7d8fe5e92026-05-27 · +8dVerified
Indiana State AGbd_56ff4da0557796012026-03-26 · +54dVerified by operator

Name: Ampex Data Systems
norm: ampex data
Domain: ampex.com

Name: Ampex Data Systems
norm: ampex data
Domain: ampex.com
Industry: Technologyllm

Discovered: Mar 21, 2026
Breach occurred: Mar 21, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 1, 2026
Affected individuals: 6state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI’s Internet Crime Complaint Center (IC3)Notified the Department of Defense Cyber Crime Center (DC3)

During the incident: Informed IT Security Consultants and shut down servers
Engaged specialized Forensic IT firm and Cyber Counsel
Notified the FBI’s Internet Crime Complaint Center (IC3)
Notified the Department of Defense Cyber Crime Center (DC3)
Worked with an incident response service to negotiate with the threat actors
Engaged an IT Security firm to assist in restoring servers
Reviewing IT policies and procedures
Continuing to work with the FBI to assist in its investigation
Updated IC3 and DC3 reports
Changes made: Improving IT Security posture going forward
Reviewing IT policies and procedures to ensure all security measures are in place
Providing Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: MA AG >30dLeak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMar 26 · first

Maine State AG+53d

Massachusetts State AG+54d · this page

Nebraska State AG+61d

California State AG+62d

Pattern: first filing Mar 26 (IN), last May 27 (CA) — a 62-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-809-ampex-data-systems-corp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 19, 2026
Raw hash: 529f28a997fec202fbf3f2ce8369e6dd17fa0cec8117cde47cc6941bf870895d

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityAmpex Data Systems

Victim entityAmpex Data Systems

Incidentdiscovered Mar 21, 2026

Stated responseInformed IT Security Consultants and shut down servers

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov