HackingCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Distribution Services International, Inc.
bd_a6484772edc9a8a3 · schema v1 · pii pii-v1
Full breach record for Distribution Services International, Inc. →Distribution Services International, Inc. (DSI) notified affected individuals of a data security incident discovered on March 24, 2026. Unauthorized access occurred between March 15-16, 2026, potentially exposing PII of current and former employees. DSI engaged cybersecurity experts, reported to the FBI, and offered 24 months of credit monitoring via Epiq. No evidence of misuse was found.
Massachusetts clock⏱ MA AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_89dbe33f176d4da6Indiana State AGfiled 2026-06-08(7d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-933-distribution-services-international-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 5f6bae2e42ecaf09a5950381f98398e9b189a36ebcd2e9e40287ab9f07b32cc1
Reporting entity
- Name
- Distribution Services International, Inc.norm: distribution services
Victim entity
- Name
- Distribution Services International, Inc.norm: distribution services
Incident
- Discovered
- Mar 24, 2026
- Materiality determined
- —
- Notification sent
- May 6, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Reported the incident to the FBI
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- MA AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.