MalwareOtherRansomwareData EncryptedTargetedIdentity (basic)Government IDEmploymentHighContained

DAK Americas, LLC

bd_c41d7be7767e90dc · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 15, 2020

Filed

Jun 2, 2020

To disclose

11 weeks

Affected

43,987state residents only

Linked

5 filings

Confidence

66%

Full breach record for DAK Americas, LLC →

DAK Americas LLC notified Montana residents of a ransomware incident on a legacy virtual server discovered on March 15, 2020. The breach potentially affected over 3,000 individuals, including employees. Data involved names, SSNs, driver's licenses, and salary info. No evidence of misuse was found. The company engaged forensic investigators and law enforcement, provided 24 months of credit monitoring, and enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 79 days

Mar 15, 2020

Discovered

Jun 2, 2020

Filed

vs. sector median

+3 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_f565c4016adbbb3d2020-06-04 · +2dVerified
South Carolina State AGbd_f9210aec735925b12020-06-05 · +3dVerified
Indiana State AGbd_60e65c1823e42e342020-06-08 · +6dVerified
New Hampshire State AGbd_fae4c68d68cf8ee32020-06-10 · +8dVerified

Name: DAK Americas, LLC
norm: dak americas

Name: DAK Americas, LLC
norm: dak americas
Industry: Otherllm

Discovered: Mar 15, 2020
Materiality determined: —
Notification sent: Jun 2, 2020
Affected individuals: 43,987state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Cooperated with law enforcement officials
Initial access: valid_credentials

During the incident: Contained the breach within 24 hours
Began an investigation with the assistance of third-party vendors and law enforcement
Disabled access to the affected server
Hired a cybersecurity firm to conduct a global investigation
Engaged Parker Poe, a law firm
Cooperated with law enforcement officials
Provided identity and credit monitoring services at no cost for twenty-four (24) months
Changes made: Implemented increased security measures
Conducted additional employee training
Initiated dark web monitoring
Reviewing policies and procedures relating to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJun 2 · first · this page

Massachusetts State AG+2d

South Carolina State AG+3d

Indiana State AG+6d

New Hampshire State AG+8d

Pattern: first filing Jun 2 (MT), last Jun 10 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-99.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2020
Raw hash: 415ba1f331375531f6154557d736963979fc0187b60521b9b40f553a9fc7485b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDAK Americas, LLC

Victim entityDAK Americas, LLC

Incidentdiscovered Mar 15, 2020

Stated responseContained the breach within 24 hours

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov