MalwareTechnologyInformationRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHighContained

DG3 NORTH AMERICA, INC.

bd_c9f1cd861768c280 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 19, 2024

Filed

Jul 26, 2024

To disclose

18 weeks

Affected

2,670state residents only

Linked

9 filings

Confidence

68%

Full breach record for DG3 NORTH AMERICA, INC. →3 incidents on file

DG3 North America, Inc. reported a ransomware cyber incident affecting 2,670 Washington residents. Unauthorized access to personal information (names, addresses, dates of birth) occurred between February 5 and March 22, 2024. DG3 discovered the incident on March 19, 2024, engaged forensic specialists, notified law enforcement, and provided 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d18 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 43 days

discovery → filing · 18 weeks / 129 days

Feb 5, 2024

Begins

Mar 19, 2024

Discovered

Jul 26, 2024

Filed

vs. sector median

on median

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Vermont State AGbd_27c5b3f7791858d92024-07-03 · +23dVerified
California State AGbd_7cc0ccf7210e21452024-07-03 · +23dVerified
Indiana State AGbd_97d8ee49b95cb7a52024-07-03 · +23dVerified
New Hampshire State AGbd_a80b2d135dc215072024-07-03 · +23dVerified

Show 4 more filings ↓up to 56d gap

Maine State AGbd_fa12d9a2227192932024-07-03 · +23dVerified
Montana State AGbd_1e3d7f4f2e934bbe2024-05-31 · +56dCandidate
Maine State AGbd_465aad9ab025282a2024-05-31 · +56dCandidate
Massachusetts State AGbd_8d48d4c1e95140492024-05-31 · +56dVerified

Name: DG3 NORTH AMERICA, INC.
norm: dg3 north america

Name: DG3 NORTH AMERICA, INC.
norm: dg3 north america
Industry: Technologyllm

Discovered: Mar 19, 2024
Breach occurred: Feb 5, 2024 – Mar 22, 2024
Undetected for: 43 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 13, 2024
Affected individuals: 2,670state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Launched an investigation and worked with forensic specialists
Secured our systems
Notified federal law enforcement
Offering you complimentary access to 24 months of credit monitoring and identity theft restoration services, through Experian
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(129 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Montana State AGMay 31 · first

Maine State AGMay 31 · first

Massachusetts State AGMay 31 · first

Vermont State AG+33d

California State AG+33d

Indiana State AG+33d

New Hampshire State AG+33d

Maine State AG+33d

Washington State AG+56d · this page

Pattern: first filing May 31 (MT), last Jul 26 (WA) — a 56-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA29971.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2024
Raw hash: d720e4db89e77b066f4d20eed0dfdcd87f7d6a2e2ba748a7a81cf6664ea1988f

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityDG3 NORTH AMERICA, INC.

Victim entityDG3 NORTH AMERICA, INC.

Incidentdiscovered Mar 19, 2024

Stated responseLaunched an investigation and worked with forensic specialists

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com