MalwareRetail & ConsumerRetailRansomwareCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowContained

Cabinets 2000 Inc

bd_73278426b60761dc · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2025

Filed

Dec 30, 2025

To disclose

11 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Cabinets 2000 Inc →3 incidents on file

Cabinets 2000, LLC experienced a ransomware incident where files were encrypted by a virus on October 15, 2025. Investigation revealed unauthorized copying of files between October 2 and 3, 2025. The company took systems offline, restored them, and is notifying affected individuals. Identity monitoring services are being provided. Data types involved include names and potentially other personal information.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 13 days

discovery → filing · 11 weeks / 76 days

Oct 2, 2025

Begins

Oct 15, 2025

Discovered

Dec 30, 2025

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Cabinets 2000 Inc
norm: cabinets 2000
Domain: cabinets2000.com

Name: Cabinets 2000 Inc
norm: cabinets 2000
Domain: cabinets2000.com
Industry: Retail & Consumerllm

Discovered: Oct 15, 2025
Breach occurred: Oct 2, 2025 – Oct 3, 2025
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 30, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Took systems offline and securely restored them
Reviewed the matter further to determine what occurred
Notifying individuals to ensure they are made aware of this matter
Providing individuals with free resources and guidance, including identity monitoring services
Changes made: Evaluating technical security measures, policies and practices to reduce the risk of a matter like this reoccurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-616428
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2025
Raw hash: a74af44843a6335b828329dc3866011a4e4d73927b064b6e29bf16a5c439f144

Reporting entityCabinets 2000 Inc

Victim entityCabinets 2000 Inc

Incidentdiscovered Oct 15, 2025

Stated responseTook systems offline and securely restored them

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov