MalwareOtherRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

JRK Property Holdings Inc

bd_96827963c53a965a · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 26, 2026

Filed

Jul 27, 2026

To disclose

18 weeks

Affected

5,667state residents only

Linked

12 filings

Confidence

68%

Full breach record for JRK Property Holdings Inc →

JRK Property Holdings, Inc. notified the Washington AG of a ransomware incident on March 26, 2026. The breach affected 5,667 Washington residents, exposing names, SSNs, driver's licenses, passport numbers, financial info, and health data. JRK engaged forensic experts, secured systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d18 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 18 weeks / 123 days

Mar 26, 2026

Begins

Mar 26, 2026

Discovered

Jul 27, 2026

Filed

vs. sector median

+10 wks slower

This filing is one of 12 about the same incident.View merged incident

A leak claim by thegentlemen about this victim predates this filing by 113 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_0e6c6f777dd157102026-07-27Verified
South Carolina State AGbd_b8fafd50c968b6392026-07-27Verified
New Hampshire State AGbd_da732d88759498142026-07-27Verified
Vermont State AGbd_2e39d398ebab3a4f2026-07-28 · +1dVerified

Show 6 more filings ↓up to 83d gap

Texas State AGbd_f83e04dde7aea38b2026-07-28 · +1dVerified
Nebraska State AGbd_c7b6cbf790cd14e02026-07-24 · +3dVerified
Oregon State AGbd_c0c972873401969b2026-08-04 · +8dVerified
Massachusetts State AGbd_ab8b9803177130ef2026-05-12 · +76dVerified by operator
New Hampshire State AGbd_fc56a408cc132f752026-05-11 · +77dVerified
Nebraska State AGbd_f4ca8b14952440972026-05-05 · +83dVerified by operator

Showing first 10 of 11 linked disclosures.

Name: CLARK HILL PLC
norm: clark hill

Name: JRK Property Holdings Inc
norm: jrk property
Domain: jrk.com
Industry: Otherllm

Discovered: Mar 26, 2026
Breach occurred: Mar 26, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 24, 2026
Affected individuals: 5,667state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberMilitary ID numberPassport number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General

During the incident: Initiated incident response protocols
Took steps to secure its systems
Engaged cybersecurity experts to assist with the investigation
Engaged a third-party forensic firm to assist in the investigation
Mailed letters to potentially affected individuals
Offered 12 months of credit monitoring and identity protection services through Experian at no cost
Changes made: Implemented and will continue to adopt additional safeguards and technical security measures to further protect its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(123 days from discovery to filing)
Compliance flags: WA AG >90dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Nebraska State AGMay 5 · first

New Hampshire State AG+6d

Massachusetts State AG+7d

Nebraska State AG+80d

California State AG+83d

South Carolina State AG+83d

New Hampshire State AG+83d

Washington State AG+83d · this page

Vermont State AG+84d

Texas State AG+84d

Oregon State AG+91d

Pattern: first filing May 5 (NE), last Aug 4 (OR) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA42008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2026
Raw hash: e1bc45df8b32a1fb4854ec0c0852f514cabe71ed5191a38c9d749a8f409807e3

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityCLARK HILL PLC

Victim entityJRK Property Holdings Inc

Incidentdiscovered Mar 26, 2026

Stated responseInitiated incident response protocols

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com