UnknownMedium

Andesa

bd_6d55c181d2029fd5 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Oct 23, 2023

To disclose

—

Affected · nationwide

2,2968 in this filing

Linked

10 filings

Confidence

95%

Full breach record for Andesa →

Andesa Services, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-30 and was reported on 2023-10-23. 8 Indiana residents were affected. 2,296 individuals affected in total.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

May 30, 2023

Begins

Oct 23, 2023

Filed

This filing is one of 10 about the same incident.View merged incident

A leak claim by cl0p about this victim predates this filing by 122 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedispossessorbd_bee424cd2ef287e62023-08-27 · +57dVerified by operator
Leak Sitecl0pbd_387b6476cd49ce4c2023-06-23 · +122dVerified by operator

Regulatory filings (7) · sorted by filing gap

Montana State AGbd_6c4814cd840b05072023-10-23Verified by operator
California State AGbd_871d7add6a1eb5452023-10-23Verified by operator
Vermont State AGbd_d272e85e64f9ed582023-10-23Verified by operator
Maine State AGbd_18f81f490bcf9b002023-10-25 · +2dVerified by operator

Show 3 more filings ↓up to 8d gap

New Hampshire State AGbd_7515e552094190112023-10-25 · +2dVerified by operator
Massachusetts State AGbd_a6349629c1062e652023-10-25 · +2dVerified by operator
New Hampshire State AGbd_18472c95d93c96652023-10-31 · +8dVerified by operator

Name: Andesa
norm: andesa
Domain: andesaservices.com

Name: Andesa
norm: andesa
Domain: andesaservices.com

Discovered: —
Breach occurred: May 30, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 2,296state + nationwide
Data types: —
Attack vector: Unknown

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Montana State AGOct 23 · first

California State AGOct 23 · first

Vermont State AGOct 23 · first

Indiana State AGOct 23 · first · this page

Maine State AG+2d

New Hampshire State AG+2d

Massachusetts State AG+2d

New Hampshire State AG+8d

Pattern: first filing Oct 23 (MT), last Oct 31 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/security-breaches/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 23, 2023
Raw hash: 1d278d40fdb289f235c9a5f8ec03444b6a86e7780f34d3db8985edff30f08906

Linked disclosures

Ransomware claims (2)

Regulatory filings (7) · sorted by filing gap

Reporting entityAndesa

Victim entityAndesa

IncidentUnknown

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancewww.in.gov