MalwareTechnologyHealthcareInformationRansomwareBlack BastaData ExfiltratedData PublishedRansom DemandedTargetedIdentity (basic)Government IDHighContained

WorldOne Inc.

bd_7c49c9b0c9b49ab6 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 10, 2024

Filed

Feb 9, 2026

To disclose

22 months

Affected · nationwide

2,6745 in this filing

Linked

7 records

Confidence

66%

Full breach record for WorldOne Inc. →2 incidents on file

WorldOne Inc. dba Sermo reported a ransomware incident attributed to Black Basta. Unauthorized access occurred between March 19 and April 10, 2024, resulting in the exfiltration and publication of personal data including Social Security numbers. 2,674 individuals were affected, including 5 Maine residents. Notification was sent on February 9, 2026, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d22 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 22 days

discovery → filing · 22 months / 670 days

Mar 19, 2024

Begins

Apr 10, 2024

Discovered

Feb 9, 2026

Filed

vs. sector median

+85 wks slower

This filing is one of 7 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 671 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_39f8b9fed6617a2e2024-03-19 · +692dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_2c692d17ae0811bd2026-02-09Candidate
Nebraska State AGBlack Bastabd_4bf2974957f53ef32026-02-09Verified by operator
New Hampshire State AGBlack Bastabd_8b6e47cbe8564c3e2026-02-09Verified by operator
Indiana State AGbd_f9e4422ef61e72ae2026-02-09Verified by operator

Show 1 more filing ↓up to 1d gap

Massachusetts State AGbd_b588b71b7c55954f2026-02-10 · +1dVerified

Name: Kennedys CMK LLP
norm: kennedys cmk

Name: WorldOne Inc.
norm: worldone
Domain: sermo.com
Also named: WorldOne Inc.dba oflegal entity
Sermodba oftrade name
Industry: TechnologyllmHealthcarellm

Discovered: Apr 10, 2024
Breach occurred: Mar 19, 2024 – Apr 10, 2024
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2026
Affected individuals: 2,674state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Ransomware· Black Basta
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
Threat actor: Black BastaExternalFinancial
Regulator citations: Notified Maine Office of Attorney General

During the incident: Took immediate action to secure network environment
Retained cybersecurity professionals to investigate
Conducted detailed review of the contents of the data
Offered 12 months of credit monitoring services provided by Kroll
Changes made: Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 months(670 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 670dME resident >60d · 670d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 10, 2024
→ Filed with AG: Feb 9, 2026
670d 30 days (soft) ME AG >30d
Maine
Discovered: Apr 10, 2024
→ Notified: Feb 9, 2026
670d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 10, 2024 → Filed with AG: Feb 9, 2026	670d	30 days (soft)	ME AG >30d
Maine	Discovered: Apr 10, 2024 → Notified: Feb 9, 2026	670d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGFeb 9 · first

Nebraska State AGFeb 9 · first

New Hampshire State AGFeb 9 · first

Indiana State AGFeb 9 · first

Maine State AGFeb 9 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b2392c26-fd7b-437c-b13d-eef3668b5aec.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2026
Raw hash: 3244039533a09d43173f0d21b11be5c66a1dc2c8efcdd032a559d523b3bfcb16

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityKennedys CMK LLP

Victim entityWorldOne Inc.

Incidentdiscovered Apr 10, 2024

Stated responseTook immediate action to secure network environment

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov