MalwareManufacturingManufacturingRansomwareDoppelpaymerData ExfiltratedData PublishedRansom DemandedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

DiVal Safety Equipment, Inc.

bd_907d427ced0153cd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 30, 2020

Filed

Aug 26, 2020

To disclose

27 days

Affected

1state residents only

Linked

3 filings

Confidence

69%

Full breach record for DiVal Safety Equipment, Inc. →2 incidents on file

DiVal Safety Equipment, Inc. notified the NH Attorney General of a July 30, 2020 DoppelPaymer ransomware attack. The incident resulted in the exfiltration and subsequent publication of employee PII, including names, addresses, and SSNs. One NH resident was affected. DiVal engaged forensic experts, Coveware (negotiation), and law enforcement (FBI seized the cloud share). Remediation included EDR deployment and offering ID Shield protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 days

Jul 30, 2020

Discovered

Aug 26, 2020

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_83fe5cfb3b3339002020-08-21 · +5dVerified
Indiana State AGbd_a3c37b6a15f1809e2020-08-20 · +6dVerified

Name: DiVal Safety Equipment, Inc.
norm: dival safety equipment
Domain: divalsafety.com

Name: DiVal Safety Equipment, Inc.
norm: dival safety equipment
Domain: divalsafety.com
Industry: Manufacturingllm

Discovered: Jul 30, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement of the ransomware attackFBI was able to seize the cloud share account that contained the files and remove it from the site

During the incident: Engaged forensic experts as well as a ransomware expert to protect and attempt to recover its systems
Engaged an expert, Coveware, to negotiate with the criminals
Notified law enforcement of the ransomware attack
Installation of EDR Software on all devices
Offering identity theft protection through ID SHIELD at no charge
Changes made: Conduct a thorough assessment of data security to ensure there are no additional vulnerabilities
Working with security experts Fortinet and Global Security IQ
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGAug 20 · first

Massachusetts State AG+1d

New Hampshire State AG+6d · this page

Pattern: first filing Aug 20 (IN), last Aug 26 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dival-safety-equipment-20200826.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 26, 2020
Raw hash: 1aaa13c3cf1bad4643f27498ed9580de167e2875d9a9f1b6151ed7575af6f7f3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDiVal Safety Equipment, Inc.

Victim entityDiVal Safety Equipment, Inc.

Incidentdiscovered Jul 30, 2020

Stated responseEngaged forensic experts as well as a ransomware expert to protect and attempt to recover its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov