MalwareOtherRansomwareData EncryptedRansom DemandedIdentity (basic)Government IDFinancial accountHighContained

International Chapter of the P.E.O. Sisterhood

bd_a7103fd4749720ae · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 14, 2023

Filed

Jun 14, 2023

To disclose

9 weeks

Affected

3,450state residents only

Linked

8 filings

Confidence

70%

Full breach record for International Chapter of the P.E.O. Sisterhood →

International Chapter of the P.E.O. Sisterhood experienced a ransomware attack on April 14, 2023, which shut down systems. The incident affected 3,450 individuals, potentially exposing names, SSNs, DOBs, and financial account numbers. The organization engaged forensic experts, notified the FBI, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d9 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 9 weeks / 61 days

Apr 14, 2023

Begins

Apr 14, 2023

Discovered

Jun 14, 2023

Filed

vs. sector median

+1 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_4ba7d72068a57fc92023-06-14Verified
Massachusetts State AGbd_666e275ec17f9f9c2023-06-14Verified
Oregon State AGbd_6823b77d826781f62023-06-14Verified
California State AGbd_727f2cc3722b39352023-06-14Verified

Show 3 more filings ↓up to 164d gap

Montana State AGbd_dba290b57ca14a8f2023-06-14Verified
New Hampshire State AGbd_8d3132a386b8fd772023-06-20 · +6dVerified
Illinois State AGbd_1dfea89edc5fcf2a2023-01-01 · +164dCandidate

Name: International Chapter of the P.E.O. Sisterhood
norm: international chapter of the peo sisterhood
Industry: Non-Profit/Charity

Name: International Chapter of the P.E.O. Sisterhood
norm: international chapter of the peo sisterhood
Industry: Non-Profit/Charity
Industry: Otherllm

Discovered: Apr 14, 2023
Breach occurred: Apr 14, 2023 – May 31, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 14, 2023
Affected individuals: 3,450state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Engaged legal and cyber security experts
Reported the incident to the Federal Bureau of Investigation
Offering identity theft protection services through IDX
Changes made: Taking additional steps to safeguard systems from similar criminal activity in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+164d

Massachusetts State AG+164d

Oregon State AG+164d

California State AG+164d

Montana State AG+164d

Washington State AG+164d · this page

New Hampshire State AG+170d

Pattern: first filing Jan 1 (IL), last Jun 20 (NH) — a 170-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA24497.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2023
Raw hash: 7f65f3abdf2b84f329b1276921ea967005a0e6d198a156bf03bd19644d0c3e7a

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityInternational Chapter of the P.E.O. Sisterhood

Victim entityInternational Chapter of the P.E.O. Sisterhood

Incidentdiscovered Apr 14, 2023

Stated responseEngaged legal and cyber security experts

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com