MalwareFinancial ServicesFinanceRansomwareRansom DemandedData ExfiltratedIdentity (basic)Government IDFinancialHighContained

Bradford Exploration, Inc.

bd_82cea474a917f479 · schema v1 · pii pii-v1

Severity

High

Discovered

May 27, 2025

Filed

Jul 31, 2025

To disclose

9 weeks

Affected · nationwide

3,008508 in this filing

Confidence

66%

Full breach record for Bradford Exploration, Inc. →

Bradford Exploration, Inc. notified the Iowa AG of a ransomware incident discovered May 27, 2025. A criminal group gained unauthorized access, encrypted data, and potentially exfiltrated PII including names, addresses, SSNs, and distribution info. 508 Iowa residents and 2,500 others were notified starting July 18, 2025. Law enforcement (FBI) was engaged.

J jump to incidentP pin to compareR raw source

Iowa clock✗ IA AG >5 bday9 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 9 weeks / 65 days

May 27, 2025

Discovered

Jul 31, 2025

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,008 affectedView incident

Name: Bradford Exploration, Inc.
norm: bradford exploration

Name: Bradford Exploration, Inc.
norm: bradford exploration
Industry: Financial Servicesllm

Discovered: May 27, 2025
Materiality determined: —
Notification sent: Jul 18, 2025
Affected individuals: 3,008state + nationwide
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Engagement with law enforcement, including the Federal Bureau of Investigation

During the incident: Engaged cybersecurity experts to assist in assessing the scope of the incident
Taking steps to mitigate any potential impact and contain the incident
Engagement with law enforcement, including the Federal Bureau of Investigation
Changes made: Implemented additional measures to enhance already existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: IA AG >5 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/7312025_Bradford_Exploration_B3ED6508DA5F3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2025
Raw hash: 140cc7cc65e53db847a8528ee00b3530c1c1d8b8c2566dcafca17fa43cbe89d8

Reporting entityBradford Exploration, Inc.

Victim entityBradford Exploration, Inc.

Incidentdiscovered May 27, 2025

Stated responseEngaged cybersecurity experts to assist in assessing the scope of the incident

ComplianceIA AG >5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov