MalwareRetail & ConsumerRetailRansomwareData ExfiltratedData EncryptedRansom DemandedIdentity (basic)Government IDPIIMediumActive

Agilix Solutions

bd_8d02c99916571cad · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 28, 2022

Filed

Jan 31, 2023

To disclose

9 weeks

Affected

1state residents only

Linked

3 filings

Confidence

63%

Full breach record for Agilix Solutions →

Agilix Solutions, an industrial distributor, disclosed a ransomware incident impacting systems between Nov 22-27, 2022. The breach resulted in the encryption of systems and potential exfiltration of customer PII, including SSNs and driver's license data. Agilix engaged forensic investigators and law enforcement, offering credit monitoring to affected customers.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 9 weeks / 64 days

Nov 22, 2022

Begins

Nov 28, 2022

Discovered

Jan 31, 2023

Filed

vs. sector median

on median

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_f13f976c6c474af52023-01-31Verified
Massachusetts State AGbd_99a663a6f5d388d32023-02-01 · +1dVerified

Name: Agilix Solutions
norm: agilix solutions

Name: Agilix Solutions
norm: agilix solutions
Industry: Retail & Consumerllm

Discovered: Nov 28, 2022
Breach occurred: Nov 22, 2022 – Nov 27, 2022
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified local and federal law enforcement

During the incident: Engaged a third-party forensic firm to assist our internal teams with the forensic investigation
Notified local and federal law enforcement
Initiated password rotations
Verified multi-factor authentication (MFA) enforcement
Deploying an Endpoint Detection and Response (EDR) agent
Offering identity theft protection services at no cost
Changes made: Enhancements to our systems
Deploying an Endpoint Detection and Response (EDR) agent to all user workstations
Monitoring EDR agent by a 24/7 third-party
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJan 31 · first

Montana State AGJan 31 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-50.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2023
Raw hash: 6aac8807b25688aacf1ff5a920a9ac4d7d4a77d75c7d6e60c2d0725b48892bd7

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAgilix Solutions

Victim entityAgilix Solutions

Incidentdiscovered Nov 28, 2022

Stated responseEngaged a third-party forensic firm to assist our internal teams with the forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov