MalwareRetail & ConsumerRetailRansomwareCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowContained

Cabinets 2000 Inc

bd_73278426b60761dc · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2025

Filed

Dec 30, 2025

To disclose

11 weeks

Affected

Not disclosed

Linked

3 records

Confidence

64%

Full breach record for Cabinets 2000 Inc →

Cabinets 2000, LLC experienced a ransomware incident where files were encrypted by a virus on October 15, 2025. Investigation revealed unauthorized copying of files between October 2 and 3, 2025. The company took systems offline, restored them, and is notifying affected individuals. Identity monitoring services are being provided. Data types involved include names and potentially other personal information.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d11 weeks discovery → filing

Incident timeline

undetected · 13 days

discovery → filing · 11 weeks / 76 days

Oct 2, 2025

Begins

Oct 15, 2025

Discovered

Dec 30, 2025

Filed

vs. sector median

+1 wks slower

This filing is one of 3 records about the same incident.View merged incident

A leak claim by blackshrantac about this victim was first seen 71 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteblackshrantacbd_4247b3122fbb7c3a2025-10-20 · +70dCandidate
Leak Siteblackshrantacbd_dad0653ab07b990c2025-10-15 · +76dVerified by operator

Name: Cabinets 2000 Inc
norm: cabinets 2000
Domain: cabinets2000.com

Name: Cabinets 2000 Inc
norm: cabinets 2000
Domain: cabinets2000.com
Industry: Retail & Consumerllm

Discovered: Oct 15, 2025
Breach occurred: Oct 2, 2025 – Oct 3, 2025
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 30, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Took systems offline and securely restored them
Reviewed the matter further to determine what occurred
Notifying individuals to ensure they are made aware of this matter
Providing individuals with free resources and guidance, including identity monitoring services
Changes made: Evaluating technical security measures, policies and practices to reduce the risk of a matter like this reoccurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-616428
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2025
Raw hash: a74af44843a6335b828329dc3866011a4e4d73927b064b6e29bf16a5c439f144

Linked disclosures

Ransomware claims (2)

Reporting entityCabinets 2000 Inc

Victim entityCabinets 2000 Inc

Incidentdiscovered Oct 15, 2025

Stated responseTook systems offline and securely restored them

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov