MalwareOtherRansomwareStolen CredentialsData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedAuthenticationFinancial accountIdentity (basic)Government IDMediumContained

Select Sires Member Cooperative fka All West Select Sires

bd_d07a783a5f5b130e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 5, 2025

Filed

Mar 5, 2025

To disclose

28 days

Affected

592state residents only

Confidence

71%

Full breach record for Select Sires Member Cooperative fka All West Select Sires →

Select Sires Member Cooperative reported a ransomware breach affecting 592 Washington residents. Unauthorized access occurred Feb 2-5, 2025, compromising names, addresses, financial data, and potentially SSNs. The company notified individuals on March 5, 2025, offered credit monitoring, and implemented MFA and server discontinuation.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d28 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days

discovery → filing · 28 days

Feb 2, 2025

Begins

Feb 5, 2025

Discovered

Mar 5, 2025

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed592 affectedView incident

Name: Select Sires Member Cooperative fka All West Select Sires
norm: select sires member cooperative fka all west select sires

Name: Select Sires Member Cooperative fka All West Select Sires
norm: select sires member cooperative fka all west select sires
Industry: Otherllm

Discovered: Feb 5, 2025
Breach occurred: Feb 2, 2025 – Feb 5, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 5, 2025
Affected individuals: 592state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDate of birthUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported to Washington Office of the Attorney General
Initial access: valid_credentials

During the incident: Conducted a thorough investigation into the scope and cause of the breach
Implemented security measures to prevent further unauthorized access
Notified affected individuals through letters mailed on March 5th, 2025
Offered credit monitoring services to impacted individuals
Working with cybersecurity professionals and law enforcement agencies
Discontinued the use of servers in all locations
Implemented multi-factor authentication on all emails and one drive access
Changes made: Discontinued the use of servers in all locations
Implemented multi-factor authentication on all emails and one drive access
Offered 12 months of Credit and CyberScan monitoring
Provided $1,000,000 insurance reimbursement policy
Provided fully managed id theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA32605.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2025
Raw hash: f1726d77b44e2416a185ca8978ed05ed73c8cc57488f42e5c631d3fa7b450a16

Reporting entitySelect Sires Member Cooperative fka All West Select Sires

Victim entitySelect Sires Member Cooperative fka All West Select Sires

Incidentdiscovered Feb 5, 2025

Stated responseConducted a thorough investigation into the scope and cause of the breach

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com