MalwareRetail & ConsumerRetailRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDFinancial accountMediumContained

American Frame Corporation

bd_7f11b445287ba87a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2020

Filed

Jan 25, 2021

To disclose

25 weeks

Affected

117state residents only

Linked

9 filings

Confidence

66%

Full breach record for American Frame Corporation →

American Frame Corporation notified the Idaho Attorney General of a cybersecurity incident detected on August 1, 2020. An unauthorized third party attempted to infiltrate the network, encrypt data, and demand ransom. Potentially exposed data included names, addresses, SSNs, and credit card information. 117 Idaho residents were notified on January 14, 2021. The company engaged forensic specialists and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 177 days

Aug 1, 2020

Begins

Aug 1, 2020

Discovered

Jan 25, 2021

Filed

vs. sector median

+18 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

California State AGbd_2664ce40a4d83da62021-01-25Verified
Maine State AGbd_6742a8cb5abf4d182021-01-25Candidate
Washington State AGbd_73e00082633041212021-01-25Verified
Oregon State AGbd_dd80bc80763b9b512021-01-25Verified

Show 4 more filings ↓up to 11d gap

Massachusetts State AGbd_bb12635c734bd0662021-01-27 · +2dVerified
New Hampshire State AGbd_1ecdc4efcde9d38c2021-02-01 · +7dVerified
Indiana State AGbd_eedd764a9999e6782021-01-14 · +11dVerified
Montana State AGbd_ef07f78a5213490d2021-01-14 · +11dCandidate

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: American Frame Corporation
norm: american frame
Domain: americanframe.com
Industry: Retail & Consumerllm

Discovered: Aug 1, 2020
Breach occurred: Aug 1, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 14, 2021
Affected individuals: 117state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Conducted an investigation with the assistance of third-party forensic specialists
Confirming the security of its network environment
Offering credit monitoring and identity theft protection services through ID Experts Corp.
Changes made: Reviewed and altered its tools, policies, and procedures relating to the security of its systems and servers
Reviewed and altered its information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(177 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Indiana State AGJan 14 · first

Montana State AGJan 14 · first

California State AG+11d

Maine State AG+11d

Washington State AG+11d

Oregon State AG+11d

Idaho State AG+11d · this page

Massachusetts State AG+13d

New Hampshire State AG+18d

Pattern: first filing Jan 14 (IN), last Feb 1 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ag.idaho.gov/content/uploads/2022/03/01-29-21-American-Frame-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2021
Raw hash: af1cb0ed602ceae7405564708f1b6c9ac27b51e29390b79d564c481edc2d61e4

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityAmerican Frame Corporation

Incidentdiscovered Aug 1, 2020

Stated responseConducted an investigation with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceag.idaho.gov