MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedIdentity (basic)Government IDMediumContained

Spokane Produce

bd_c6daa848f2d2d510 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 22, 2025

Filed

Oct 6, 2025

To disclose

11 weeks

Affected

788state residents only

Linked

4 filings

Confidence

71%

Full breach record for Spokane Produce →

Spokane Produce, Inc. notified the WA Attorney General of a ransomware incident affecting 788 Washington residents. Personal information including names, DOBs, driver's license numbers, and SSNs was potentially accessed. The incident was discovered on July 22, 2025, and notifications were sent on October 6, 2025. The company engaged forensic experts and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d11 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 4 days

discovery → filing · 11 weeks / 76 days

Jul 18, 2025

Begins

Jul 22, 2025

Discovered

Oct 6, 2025

Filed

vs. sector median

+3 wks slower

This filing is one of 4 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 32 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_210f9c65ba4aaf882025-09-04 · +32dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_baf31268e8e239ed2025-10-06Verified
Montana State AGbd_bb6a71c3442468472025-10-06Candidate

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Spokane Produce
norm: spokane produce
Domain: spokaneproduce.com
Industry: Retail & Consumerllm

Discovered: Jul 22, 2025
Breach occurred: Jul 18, 2025 – Jul 22, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 6, 2025
Affected individuals: 788state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General

During the incident: Engaged independent cybersecurity experts to assist with the process
Offered complimentary credit monitoring and identity protection services through Epiq Global
Implemented additional technical security measures throughout the environment
Changes made: Implemented additional technical security measures throughout the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: WA AG >30dLeak >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGOct 6 · first

Montana State AGOct 6 · first

Washington State AGOct 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34850.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 6, 2025
Raw hash: d38b8d03f7efaf0a39ced95d9a2bd53fb19564ed384d1029829fdbd4f1e1e10d

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entitySpokane Produce

Incidentdiscovered Jul 22, 2025

Stated responseEngaged independent cybersecurity experts to assist with the process

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com