MalwareTechnologyInformationRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

Lasership Inc.

bd_d194585170f4d9da · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 15, 2025

Filed

Aug 27, 2025

To disclose

19 weeks

Affected

3,267state residents only

Linked

10 filings

Confidence

70%

Full breach record for Lasership Inc. →3 incidents on file

Lasership Inc. dba OnTrac Final Mile reported a ransomware cyberattack affecting 3,267 Washington residents. The incident occurred between April 13 and 15, 2025, and was discovered on April 15, 2025. Affected data included names, addresses, dates of birth, and Social Security numbers. The company is offering 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d19 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2 days

discovery → filing · 19 weeks / 134 days

Apr 13, 2025

Begins

Apr 15, 2025

Discovered

Aug 27, 2025

Filed

vs. sector median

on median

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Oregon State AGbd_1c6bf32c12e74e412025-08-27Candidate
Nebraska State AGbd_45745d86a37b665f2025-08-27Verified
Vermont State AGbd_6f553fa5e208ba5f2025-08-27Verified
Montana State AGbd_947d4739d89551f82025-08-27Verified

Show 5 more filings ↓up to 1d gap

California State AGbd_ac2690bb7a3014c82025-08-27Verified
Indiana State AGbd_f292f3ec407d03dd2025-08-27Verified
Massachusetts State AGbd_145a44c3102274622025-08-28 · +1dVerified
Texas State AGbd_65a5c2fec808682e2025-08-28 · +1dVerified
New Hampshire State AGbd_c2e7f806757d5c222025-08-28 · +1dVerified

Name: Lasership Inc.
norm: lasership

Name: Lasership Inc.
norm: lasership
Also named: Lasership Inc.dba oflegal entity
OnTrac Final Miledba oftrade name
Industry: Technologyllm

Discovered: Apr 15, 2025
Breach occurred: Apr 13, 2025 – Apr 15, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3,267state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout, a TransUnion company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(134 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Oregon State AGAug 27 · first

Nebraska State AGAug 27 · first

Vermont State AGAug 27 · first

Montana State AGAug 27 · first

California State AGAug 27 · first

Indiana State AGAug 27 · first

Washington State AGAug 27 · first · this page

Massachusetts State AG+1d

Texas State AG+1d

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34494.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 27, 2025
Raw hash: 18bf6be77592e98b0194cbc6121c31cf385fed39bd27d978d1b89f65d40f83fd

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityLasership Inc.

Victim entityLasership Inc.

Incidentdiscovered Apr 15, 2025

Stated responseProviding access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com