MalwareTechnologyInformationRansomwareData EncryptedDelayed DiscoveryIdentity (basic)Government IDMediumContained

THE TRANZONIC COMPANIES

bd_9857a638d3741421 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 27, 2021

Filed

Mar 25, 2022

To disclose

17 weeks

Affected

4state residents only

Linked

4 filings

Confidence

65%

Full breach record for THE TRANZONIC COMPANIES →

The Tranzonic Companies disclosed a security incident where unauthorized access via malicious software disrupted systems from Nov 17-27, 2021. The company discovered the incident on Nov 27, 2021, and later determined personal information (names, addresses, DOBs, SSNs) may have been accessed. Notices were sent March 25, 2022. The company engaged forensic investigators and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 10 days

discovery → filing · 17 weeks / 118 days

Nov 17, 2021

Begins

Nov 27, 2021

Discovered

Mar 25, 2022

Filed

vs. sector median

+6 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_c1bbb924d5ddb9ac2022-03-25Verified
Maine State AGbd_4145ad6a67d0f3a62022-03-24 · +1dCandidate
Massachusetts State AGbd_350af3f1ff8272972022-03-28 · +3dVerified

Name: THE TRANZONIC COMPANIES
norm: the tranzonic companies
Domain: tranzonic.com

Name: THE TRANZONIC COMPANIES
norm: the tranzonic companies
Domain: tranzonic.com
Industry: Technologyllm

Discovered: Nov 27, 2021
Breach occurred: Nov 17, 2021 – Dec 7, 2021
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2022
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_attachment

During the incident: Engaged a trusted third-party forensics firm to assist in ending the disruption
Secured all systems
Remediated any risks
Brought systems back online
Adopted additional technical and organizational tools to address system vulnerabilities
Continuing to closely monitor network and information systems for unusual activity
Implementing recommendations from third-party forensics firm to improve administrative, technical, and physical safeguards
Provided complimentary credit monitoring and ID theft prevention services through Experian
Changes made: Adopted additional technical and organizational tools to address system vulnerabilities
Implementing recommendations from third-party forensics firm to further improve administrative, technical, and physical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(118 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMar 24 · first

Indiana State AG+1d

Montana State AG+1d · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-279.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 25, 2022
Raw hash: 6f040e1390c9e6de36c0471e944cbd24a8a2a0d4f9fd895ca86b57b9d2f63884

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTHE TRANZONIC COMPANIES

Victim entityTHE TRANZONIC COMPANIES

Incidentdiscovered Nov 27, 2021

Stated responseEngaged a trusted third-party forensics firm to assist in ending the disruption

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov