MalwareFinancial ServicesFinanceRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDFinancial accountMediumContained

CALTON & ASSOCIATES, INC.

bd_6c8c5bac0f4c2f97 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 28, 2025

Filed

Jun 26, 2025

To disclose

13 weeks

Affected

662state residents only

Linked

9 filings

Confidence

71%

Full breach record for CALTON & ASSOCIATES, INC. →

Calton & Associates, Inc. reported a ransomware incident affecting 662 Washington residents. Unauthorized access occurred on March 28, 2025, exposing names, addresses, SSNs, and account numbers. The company notified the FBI, FINRA, and FTC, and provided 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d13 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 13 weeks / 90 days

Mar 28, 2025

Begins

Mar 28, 2025

Discovered

Jun 26, 2025

Filed

vs. sector median

+4 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by cl0p about this victim predates this filing by 73 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_d41208bd0df5c4562025-04-13 · +73dVerified by operator

Regulatory filings (7) · sorted by filing gap

Montana State AGbd_15ff45acc8e418c62025-06-26Verified by operator
Massachusetts State AGbd_304579978ce6e1e82025-06-26Verified by operator
Nebraska State AGbd_5573d40fb788057a2025-06-26Verified by operator
California State AGbd_aeee1a1e6cfd8b062025-06-26Verified by operator

Show 3 more filings ↓up to 33d gap

Oregon State AGbd_d56e3cfbb0a0b9242025-06-30 · +4dVerified by operator
Illinois State AGbd_65c0b45d8c39dce52025-07-01 · +5dVerified
Massachusetts State AGbd_69979e8648007b882025-07-29 · +33dVerified by operator

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: CALTON & ASSOCIATES, INC.
norm: calton associates
Domain: calton.com
Industry: Financial Servicesllm

Discovered: Mar 28, 2025
Breach occurred: Mar 28, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 26, 2025
Affected individuals: 662state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the event to the FBIReported the event to FINRANotified the Federal Trade Commission

During the incident: Conducted an immediate and comprehensive investigation to confirm the scope of the event to secure its network and to notify affected individuals
Immediately reported the event to the FBI and FINRA and also notified the Federal Trade Commission
Established a toll-free call center through TransUnion to answer questions about the incident and to address related concerns
Implemented additional cybersecurity measures
Provided access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Changes made: Implemented additional cybersecurity measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: WA AG >30dLeak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Montana State AGJun 26 · first

Massachusetts State AGJun 26 · first

Nebraska State AGJun 26 · first

California State AGJun 26 · first

Washington State AGJun 26 · first · this page

Oregon State AG+4d

Illinois State AG+5d

Massachusetts State AG+33d

Pattern: first filing Jun 26 (MT), last Jul 29 (MA) — a 33-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA33726.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2025
Raw hash: f42fd5c7c7edbda4a0bde41bebf388df155d63661f5f7692ed2f1071ee0869ff

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityCALTON & ASSOCIATES, INC.

Incidentdiscovered Mar 28, 2025

Stated responseConducted an immediate and comprehensive investigation to confirm the scope of the event to secure its network and to notify affected individuals

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com