MalwareTelecom & MediaInformationRansomwareContiData ExfiltratedData EncryptedRansom DemandedEmployee Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHealth (basic)EmploymentFinancial accountPIIMediumContained

SAC Wireless, LLC

bd_b08fbdce8af290bb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 16, 2021

Filed

Aug 26, 2021

To disclose

10 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

66%

Full breach record for SAC Wireless, LLC →

SAC Wireless experienced a ransomware attack by the Conti threat actor. Unauthorized access occurred as early as April 13, 2021, with ransomware deployed on June 16, 2021. The incident affected current and former employees, potentially exposing PII, SSNs, health insurance info, and employment records. Data was exfiltrated to cloud storage before encryption. The company contained the incident, notified the FBI, and offered 24 months of identity protection.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d10 weeks discovery → filing

Incident timeline

undetected · 64 days

discovery → filing · 10 weeks / 71 days

Apr 13, 2021

Begins

Jun 16, 2021

Discovered

Aug 26, 2021

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_4bf80acafee5c6912021-06-16 · +71dVerified by operator

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_c93452cb855995bc2021-08-23 · +3dVerified
Montana State AGContibd_0871517e517fa88b2021-08-20 · +6dVerified
Indiana State AGbd_606f1c5039b8e3922021-08-20 · +6dVerified
Massachusetts State AGbd_6b390cbb764567602021-09-02 · +7dVerified

Show 2 more filings ↓up to 237d gap

New Hampshire State AGContibd_0a283fc75fc503242021-08-19 · +7dVerified
Illinois State AGbd_81f21aabf85453042021-01-01 · +237dCandidate

Name: SAC Wireless, LLC
norm: sac wireless
Domain: sacw.com

Name: SAC Wireless, LLC
norm: sac wireless
Domain: sacw.com
Industry: Telecom & Mediallm

Discovered: Jun 16, 2021
Breach occurred: Apr 13, 2021 – Jun 16, 2021
Undetected for: 64 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)EmploymentFinancial accountPII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware· Conti
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ContiExternalFinancial
Regulator citations: Contacted the FBI

During the incident: Deployed multiple security tools and infrastructure enhancements to contain the incident
Contacted the FBI
Engaged external counsel and cyber security experts
Changed firewall rules
Disconnected VPN connections
Activated conditional access geo-location policies to limit non-U.S. access
Provided additional employee training
Deployed additional network and endpoint monitoring tools
Expanded multi-factor authentication
Deployed additional threat-hunting and endpoint detection and response tools
Offered 24-month membership to Experian identity protection services
Changes made: Changed firewall rules
Disconnected VPN connections
Activated conditional access geo-location policies to limit non-U.S. access
Provided additional employee training
Deployed additional network and endpoint monitoring tools
Expanded multi-factor authentication
Deployed additional threat-hunting and endpoint detection and response tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

New Hampshire State AG+230d

Montana State AG+231d

Indiana State AG+231d

Maine State AG+234d

California State AG+237d · this page

Massachusetts State AG+244d

Pattern: first filing Jan 1 (IL), last Sep 2 (MA) — a 244-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-544293
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 26, 2021
Raw hash: 0ad663e390b6fb20ab5227a236864da37a4d823cb0b081770a2a74075cffdb8b

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entitySAC Wireless, LLC

Victim entitySAC Wireless, LLC

Incidentdiscovered Jun 16, 2021

Stated responseDeployed multiple security tools and infrastructure enhancements to contain the incident

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov