HackingManufacturingManufacturingStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDMediumContained

Green Diamond Resource Company

bd_d6d44811063c84b8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 27, 2023

Filed

Apr 19, 2024

To disclose

42 weeks

Affected

158state residents only

Linked

11 filings

Confidence

62%

Full breach record for Green Diamond Resource Company →

Green Diamond Resource Company notified affected individuals of a security incident where an unknown actor gained access to the network between June 26-27, 2023. The incident may have exposed names, Social Security numbers, and dates of birth. The company engaged third-party forensic specialists, notified law enforcement, and is offering 24 months of credit monitoring. The investigation concluded in February 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 42 weeks / 297 days

Jun 26, 2023

Begins

Jun 27, 2023

Discovered

Apr 19, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_c80d7b45e85dbf892023-07-10 · +284dVerified by operator

Regulatory filings (9) · sorted by filing gap

HHS OCRbd_53c799f0b10cfd0a2024-04-19Verified by operator
Massachusetts State AGbd_5c434b39c6ae584d2024-04-19Verified by operator
Oregon State AGbd_694f98915dcd2dac2024-04-19Verified by operator
Washington State AGbd_7b23d50bf8814e482024-04-19Verified by operator

Show 5 more filings ↓

Maine State AGbd_8bce8b6f7748ef422024-04-19Verified
Vermont State AGbd_a39d9bdd6ac5dea62024-04-19Verified by operator
Indiana State AGbd_b17f3b29db9791372024-04-19Verified by operator
New Hampshire State AGbd_c1c51d186d07b1d52024-04-19Verified by operator
California State AGbd_cc743e6bb046ac2f2024-04-19Verified by operator

Name: Green Diamond Resource Company
norm: green diamond resource

Name: Green Diamond Resource Company
norm: green diamond resource
Industry: Manufacturingllm

Discovered: Jun 27, 2023
Breach occurred: Jun 26, 2023 – Jun 27, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 19, 2024
Affected individuals: 158state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this incident to law enforcementReporting to regulatory authorities, as required
Initial access: valid_credentials

During the incident: Took steps to secure our network and minimize any disruption to our operations
Launched an investigation into the nature and scope of the incident with the assistance of third-party cybersecurity specialists
Deployed an advanced threat protection and monitoring tool
Reviewed existing security policies and implemented additional cybersecurity measures
Reported this incident to law enforcement and are cooperating with their investigation
Offering immediate access to credit monitoring and identity theft protection services for twenty-four (24) months at no cost to you, through Transunion
Changes made: Reviewing existing security policies
Implemented additional cybersecurity measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(297 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

HHS OCRApr 19 · first

Massachusetts State AGApr 19 · first

Oregon State AGApr 19 · first

Washington State AGApr 19 · first

Maine State AGApr 19 · first

Vermont State AGApr 19 · first

Indiana State AGApr 19 · first

New Hampshire State AGApr 19 · first

California State AGApr 19 · first

Montana State AGApr 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1295.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2024
Raw hash: f7cc34d716a0450927bfc89b791d1731441c2d62c7b8dcc294fe4e813f46d121

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityGreen Diamond Resource Company

Victim entityGreen Diamond Resource Company

Incidentdiscovered Jun 27, 2023

Stated responseTook steps to secure our network and minimize any disruption to our operations

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov