MalwareManufacturingManufacturingRansomwareStolen CredentialsData ExfiltratedRansom DemandedTargetedAuthenticationCredentialsFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Green Diamond Resource Company

bd_7b23d50bf8814e48 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 27, 2023

Filed

Apr 19, 2024

To disclose

42 weeks

Affected

9,532state residents only

Linked

11 filings

Confidence

71%

Full breach record for Green Diamond Resource Company →

Green Diamond Resource Company reported a ransomware incident affecting 9,532 Washington residents. Unauthorized access occurred between June 26-27, 2023. Data types included PII, SSNs, financial accounts, and health info. The company engaged forensic specialists, notified the FBI, and provided credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d42 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 42 weeks / 297 days

Jun 26, 2023

Begins

Jun 27, 2023

Discovered

Apr 19, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_c80d7b45e85dbf892023-07-10 · +284dVerified by operator

Regulatory filings (9) · sorted by filing gap

HHS OCRbd_53c799f0b10cfd0a2024-04-19Verified by operator
Massachusetts State AGbd_5c434b39c6ae584d2024-04-19Verified by operator
Oregon State AGbd_694f98915dcd2dac2024-04-19Verified by operator
Maine State AGbd_8bce8b6f7748ef422024-04-19Verified

Show 5 more filings ↓

Vermont State AGbd_a39d9bdd6ac5dea62024-04-19Verified by operator
Indiana State AGbd_b17f3b29db9791372024-04-19Verified by operator
New Hampshire State AGbd_c1c51d186d07b1d52024-04-19Verified by operator
California State AGbd_cc743e6bb046ac2f2024-04-19Verified by operator
Montana State AGbd_d6d44811063c84b82024-04-19Verified by operator

Name: Green Diamond Resource Company
norm: green diamond resource

Name: Green Diamond Resource Company
norm: green diamond resource
Industry: Manufacturingllm

Discovered: Jun 27, 2023
Breach occurred: Jun 26, 2023 – Jun 27, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 19, 2024
Affected individuals: 9,532state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Credentials
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthPassport numberHealth insurance IDMedical informationUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 300-399dexposure 300-399d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI regarding the eventProviding written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Initial access: valid_credentials

During the incident: Launched an investigation into the nature and scope of the incident with the assistance of third-party cybersecurity specialists
Notified the FBI regarding the event
Providing access to credit monitoring services for one (1) year, through Transunion, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Implementing additional safeguards and training to its employees
Deployment of an advanced threat protection and monitoring tool
Reviewing existing security policies and implemented additional cybersecurity measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(297 days from discovery to filing)
Compliance flags: Leak >180dWA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

HHS OCRApr 19 · first

Massachusetts State AGApr 19 · first

Oregon State AGApr 19 · first

Maine State AGApr 19 · first

Vermont State AGApr 19 · first

Indiana State AGApr 19 · first

New Hampshire State AGApr 19 · first

California State AGApr 19 · first

Montana State AGApr 19 · first

Washington State AGApr 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA28746.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2024
Raw hash: 2c0f74592333deae7e83cef563d6506c0d08c9f829ba2190a4739bf328dd704d

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityGreen Diamond Resource Company

Victim entityGreen Diamond Resource Company

Incidentdiscovered Jun 27, 2023

Stated responseLaunched an investigation into the nature and scope of the incident with the assistance of third-party cybersecurity specialists

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com