HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Wm. G. Roe & Sons, Inc.

bd_a3f027d7090b7e30 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 28, 2021

To disclose

—

Affected

25state residents only

Linked

7 filings

Confidence

68%

Full breach record for Wm. G. Roe & Sons, Inc. →

Wm. G. Roe & Sons, Inc. notified Washington residents of a security incident where an unauthorized hacker accessed a data file containing employee names and Social Security numbers. Forensic investigation was inconclusive regarding data theft. The company engaged forensic experts, accelerated security upgrades, and offered one year of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 28, 2021

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_31f056314018be1e2021-09-28Verified
Massachusetts State AGbd_6208f295b4bb06c82021-09-28Verified
Oregon State AGbd_8bd37935ef945af22021-09-28Candidate
Indiana State AGbd_9e870af2cb921fc42021-09-28Verified

Show 2 more filings ↓

Montana State AGbd_a4fba58900eb6cde2021-09-28Verified
Maine State AGbd_a78cd2c6bcf2ae112021-09-28Verified

Name: Wm. G. Roe & Sons, Inc.
norm: wm g roe sons

Name: Wm. G. Roe & Sons, Inc.
norm: wm g roe sons
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 25state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged a cybersecurity forensic firm to conduct an investigation
Engaged expert assistance to stop further unauthorized access to our systems
Accelerated our plan to install additional security measures across our environment
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Install additional security measures across our environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

New Hampshire State AGSep 28 · first

Massachusetts State AGSep 28 · first

Oregon State AGSep 28 · first

Indiana State AGSep 28 · first

Montana State AGSep 28 · first

Maine State AGSep 28 · first

Washington State AGSep 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA2119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2021
Raw hash: 3f8312f86c73d495e165dbd927eb2f594cd3548d7c2c1e734ea0612abb8fb60d

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWm. G. Roe & Sons, Inc.

Victim entityWm. G. Roe & Sons, Inc.

IncidentUnauthorized Access

Stated responseEngaged a cybersecurity forensic firm to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com