MalwareTechnologyInformationRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

OPTICAL CABLE CORP

bd_938ca77ffc8b3c7d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 20, 2023

Filed

Jul 5, 2023

To disclose

15 days

Affected

Not disclosed

Linked

3 filings

Confidence

67%

Full breach record for OPTICAL CABLE CORP →

Optical Cable Corporation (OCC) disclosed a ransomware attack detected on June 20, 2023. Cybercriminals encrypted files and claimed to have exfiltrated personal information, including names, Social Security numbers, passport numbers, and driver's license copies. OCC engaged forensic experts, notified the FBI and CISA, and is offering two years of credit monitoring to affected individuals. The incident has been contained.

J jump to incidentP pin to compareR raw source

Vermont clock✓ VT AG ≤14 bday15 days discovery → filing

Incident timeline

discovery → filing · 15 days

Jun 20, 2023

Discovered

Jul 5, 2023

Filed

vs. sector median

17 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_ae0c0038bc2132752023-07-30 · +25dCandidate

Regulatory filings (1) · sorted by filing gap

SEC 8-Kbd_3dcef407b0daff852023-06-30 · +5dVerified by operator

Name: OPTICAL CABLE CORP
norm: optical cable
Domain: occfiber.com

Name: OPTICAL CABLE CORP
norm: optical cable
Domain: occfiber.com
Industry: Technologyllm

Discovered: Jun 20, 2023
Materiality determined: —
Notification sent: Jul 5, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI’s Cyber Crimes DivisionNotified the Cybersecurity and Infrastructure Security Agency (CISA)

During the incident: Launched an immediate investigation to determine the nature and scope of the activity
Engaged leading outside cybersecurity experts to investigate and remediate the incident
Notified the FBI’s Cyber Crimes Division and the Cybersecurity and Infrastructure Security Agency (CISA) of this incident
Offering two years of free credit monitoring in addition to Experian’s ID protection services
Changes made: Continuing to evaluate additional actions to strengthen our network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: VT AG ≤14 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

SEC 8-KJun 30 · first

Vermont State AG+5d · this page

Pattern: first filing Jun 30, last Jul 5 (VT) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-07-05-optical-cable-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2023
Raw hash: de7304a638d7a6e084ef9488c2f9f02c690ade8f621c30005fa2908a63a8c0c6

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityOPTICAL CABLE CORP

Victim entityOPTICAL CABLE CORP

Incidentdiscovered Jun 20, 2023

Stated responseLaunched an immediate investigation to determine the nature and scope of the activity

ComplianceVT AG ≤14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov