MalwareManufacturingManufacturingRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedPIIIdentity (basic)Health (basic)PHIMediumContained

Dynasplint Systems, Inc.

bd_b285adc08bbf588b · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 16, 2020

Filed

Aug 10, 2020

To disclose

12 weeks

Affected

1,364state residents only

Linked

7 filings

Confidence

70%

Full breach record for Dynasplint Systems, Inc. →

Dynasplint Systems, Inc. reported a ransomware incident on May 16, 2020, affecting 1,364 Washington residents. The attack encrypted systems and potentially exfiltrated customer PII and PHI. DSI engaged forensic investigators, notified the FBI, and offered 12 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d12 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 12 weeks / 86 days

May 16, 2020

Begins

May 16, 2020

Discovered

Aug 10, 2020

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_0ce123c627f4d82b2020-08-07 · +3dVerified
Indiana State AGbd_1ed498cbcd7c88d52020-08-07 · +3dVerified
HHS OCRbd_0985ef87481d32f22020-08-06 · +4dCandidate
Oregon State AGbd_10e5822bbfd7055f2020-08-17 · +7dVerified

Show 2 more filings ↓up to 7d gap

California State AGbd_6e1322ee1e4547b72020-08-17 · +7dCandidate
Massachusetts State AGbd_bfb03093f7c8dbcf2020-08-17 · +7dVerified

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: Dynasplint Systems, Inc.
norm: dynasplint systems
Industry: Manufacturing
Industry: Manufacturingllm

Discovered: May 16, 2020
Breach occurred: May 16, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 7, 2020
Affected individuals: 1,364state-resident count only
Data types: PIIIdentity (basic)Health (basic)PHI
Data elements: NameDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney GeneralNotified the Federal Bureau of Investigation

During the incident: Retained digital forensics professionals
Reported the incident to law enforcement
Engaged a digital forensics firm
Notified the Federal Bureau of Investigation
Changes made: Working with leading cybersecurity experts to enhance the security of its systems
Enhanced the security of our system
Offering free identity monitoring services for 12 months through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

HHS OCRAug 6 · first

Montana State AG+1d

Indiana State AG+1d

Washington State AG+4d · this page

Oregon State AG+11d

California State AG+11d

Massachusetts State AG+11d

Pattern: first filing Aug 6 (MD), last Aug 17 (MA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 10, 2020
Raw hash: 9afd865e7e2be1bd39fe02de702273f5b628e5fe0fc06fd0e85b17bc03fdfb8a

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityDynasplint Systems, Inc.

Incidentdiscovered May 16, 2020

Stated responseRetained digital forensics professionals

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com