MalwareTechnologyRetail & ConsumerInformationRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Davis Instruments

bd_af6052f017ec6b97 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 8, 2022

To disclose

—

Affected

1state residents only

Confidence

64%

Full breach record for Davis Instruments →

Davis Instruments experienced a ransomware attack in December 2021 that encrypted network parts and potentially exposed customer personal information, including names, addresses, checking/routing numbers, and tax IDs. The company restored systems, notified law enforcement, enhanced endpoint monitoring, reset passwords, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 1, 2021

Begins

Apr 8, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Davis Instruments
norm: davis instruments

Name: Davis Instruments
norm: davis instruments
Industry: TechnologyllmRetail & Consumerllm

Discovered: —
Breach occurred: Dec 1, 2021
Materiality determined: —
Notification sent: Apr 8, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement

During the incident: Worked with cybersecurity experts to restore our systems and investigate the incident
Notified law enforcement and will continue cooperating with their investigations
Implemented additional measures, including advanced endpoint detection and monitoring
Changed all passwords used to access our computer networks
Changes made: Will continue to review our policies and procedures to identify any additional ways to further strengthen the confidentiality and security of our information
Offering complimentary credit monitoring and identity theft restoration services through IDX
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Davis-Instruments-Consumer-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2022
Raw hash: 8161c6d8f4c43a6de6948ff4a582c417da66b17f9e842e296342e5b4d34e9c7f

Reporting entityDavis Instruments

Victim entityDavis Instruments

IncidentRansomware

Stated responseWorked with cybersecurity experts to restore our systems and investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov