MalwareRetail & ConsumerRetailRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

The Walman Optical Company

bd_9a55e9d851bbd8d7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 21, 2020

Filed

Mar 16, 2022

To disclose

19 months

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for The Walman Optical Company →

The Walman Optical Company experienced a ransomware attack on August 21, 2020, which resulted in the unauthorized access and exfiltration of employee and former employee data, including SSNs and financial information. Three New Hampshire residents were affected. The company engaged forensic investigators and the FBI, and provided one year of credit monitoring to affected individuals. Notification was sent on March 19, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 months / 572 days

Aug 21, 2020

Discovered

Mar 16, 2022

Filed

vs. sector median

+74 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_6389bbf5052af2c22021-03-31 · +350dVerified
Maine State AGbd_dccf7e0c9aae75cb2021-03-31 · +350dVerified
Maine State AGbd_e1cab310c23362532021-03-31 · +350dVerified
Indiana State AGbd_a7796964f5b4b45d2021-03-19 · +362dCandidate

Show 1 more filing ↓up to 362d gap

Montana State AGbd_f3d387fcb7d324072021-03-19 · +362dVerified

Name: Waller Lansden Dortch & Davis, LLP
norm: waller lansden dortch davis

Name: The Walman Optical Company
norm: the walman optical
Domain: walmanoptical.com
Industry: retail_consumer
Industry: Retail & Consumerllm

Discovered: Aug 21, 2020
Materiality determined: —
Notification sent: Mar 19, 2021
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: cooperated with the FBI as they investigated the group that conducted the attack

During the incident: Initiated an investigation
Retained a leading computer security firm to stop the attack and restore the computer systems to normal operations
Retained an independent cyber forensic company to analyze the information that was accessed
Cooperated with the FBI as they investigated the group that conducted the attack
Engaged ESX, a respected security company, to work with us to stop the attack and restore our computer systems to normal operations
Changes made: Implemented several security improvements to strengthen its network and data security
Changed the way we store personal information to reduce potential exposure
Offering identity monitoring services for one year from Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 months(572 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGMar 19 · first

Montana State AGMar 19 · first

Massachusetts State AG+12d

Maine State AG+12d

New Hampshire State AG+362d · this page

Pattern: first filing Mar 19 (IN), last Mar 16 (NH) — a 362-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/walman-optical-20210331.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 16, 2022
Raw hash: 8d3d1c93b3c0bb44bf14f36f635d4787d3ee66738578d8679b96d3809aadd623

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWaller Lansden Dortch & Davis, LLP

Victim entityThe Walman Optical Company

Incidentdiscovered Aug 21, 2020

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov