MalwareRansomwareRansom DemandedData EncryptedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPIIMediumContained

International Chapter of the P.E.O. Sisterhood

bd_727f2cc3722b3935 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 14, 2023

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

73%

Full breach record for International Chapter of the P.E.O. Sisterhood →

On April 14, 2023, International Chapter P.E.O. Sisterhood experienced a ransomware attack that completely shut down and locked its systems. The organization engaged legal and cybersecurity experts and reported the incident to the FBI. A forensic investigation completed May 31, 2023 could not conclusively determine whether data was exfiltrated. Potentially exposed data included names, dates of birth, SSNs, addresses, phone numbers, account numbers, and email addresses. Notification letters were sent June 14, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 14, 2023

Begins

Jun 14, 2023

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_4ba7d72068a57fc92023-06-14Verified
Massachusetts State AGbd_666e275ec17f9f9c2023-06-14Verified
Oregon State AGbd_6823b77d826781f62023-06-14Verified
Washington State AGbd_a7103fd4749720ae2023-06-14Verified

Show 3 more filings ↓up to 164d gap

Montana State AGbd_dba290b57ca14a8f2023-06-14Verified
New Hampshire State AGbd_8d3132a386b8fd772023-06-20 · +6dVerified
Illinois State AGbd_1dfea89edc5fcf2a2023-01-01 · +164dCandidate

Name: International Chapter of the P.E.O. Sisterhood
norm: international chapter of the peo sisterhood

Name: International Chapter of the P.E.O. Sisterhood
norm: international chapter of the peo sisterhood

Discovered: —
Breach occurred: Apr 14, 2023
Materiality determined: —
Notification sent: Jun 14, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1490 Inhibit System Recovery
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the Federal Bureau of Investigation

During the incident: Began efforts to restore its systems and resume operations immediately upon notice of the ransomware attack
Engaged legal and cyber security experts to help determine the extent of the attack
Conducted an investigation to determine the nature of the attack and what information, if any, could have been compromised
Gathered necessary information to contact all individuals affected
Reported the incident to the Federal Bureau of Investigation
Offering identity theft protection services through IDX, A ZeroFox Company
Changes made: Taking additional steps to safeguard P.E.O.'s systems from similar criminal activity in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+164d

Massachusetts State AG+164d

Oregon State AG+164d

Washington State AG+164d

Montana State AG+164d

California State AG+164d · this page

New Hampshire State AG+170d

Pattern: first filing Jan 1 (IL), last Jun 20 (NH) — a 170-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-567981
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2023
Raw hash: bc2456539d3bb0078c22b8ca96e02cbe6a33cdcf460b193a49c1cd32fc6a47de

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityInternational Chapter of the P.E.O. Sisterhood

Victim entityInternational Chapter of the P.E.O. Sisterhood

IncidentRansomware

Stated responseBegan efforts to restore its systems and resume operations immediately upon notice of the ransomware attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov