MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

DialAmerica Marketing, Inc.

bd_da568bb005ca8b5c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 4, 2021

Filed

Apr 6, 2022

To disclose

39 weeks

Affected

621state residents only

Linked

10 filings

Confidence

71%

Full breach record for DialAmerica Marketing, Inc. →2 incidents on file

DialAmerica Marketing, Inc. reported a ransomware incident affecting 621 Washington residents. Unauthorized access occurred between Feb 2 and July 9, 2021. Data exposed included names, SSNs, DOBs, financial accounts, and health insurance info. Notices sent April 6, 2022. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d39 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 152 days

discovery → filing · 39 weeks / 276 days

Feb 2, 2021

Begins

Jul 4, 2021

Discovered

Apr 6, 2022

Filed

vs. sector median

+21 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Massachusetts State AGbd_02e5bec2f9abf07e2022-04-06Verified
Oregon State AGbd_157c726c57e201522022-04-06Verified
Montana State AGbd_203514add1a4d61f2022-04-06Verified
Maine State AGbd_60572d6ae00698c32022-04-06Verified

Show 5 more filings ↓up to 95d gap

South Carolina State AGbd_6883a40a5e6d299c2022-04-06Verified
Indiana State AGbd_f9246be5d2c6a0fe2022-04-06Verified
New Hampshire State AGbd_6a5981f7393861572022-04-11 · +5dVerified
California State AGbd_c72403cf3e8aab592022-04-21 · +15dVerified
Illinois State AGbd_f2ef15e1bd6542c02022-01-01 · +95dCandidate

Name: DialAmerica Marketing, Inc.
norm: dialamerica marketing

Name: DialAmerica Marketing, Inc.
norm: dialamerica marketing
Industry: Professional Servicesllm

Discovered: Jul 4, 2021
Breach occurred: Feb 2, 2021 – Jul 9, 2021
Undetected for: 152 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2022
Affected individuals: 621state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Data elements: NameSocial Security numberFinancial account numberDate of birthHealth insurance ID
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 100-199dexposure 100-199d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Launched a privileged forensic investigation, with the assistance of third-party cybersecurity specialists
Conducted a thorough and in-depth review of the information accessible within the systems
Undertook additional steps to locate addresses for impacted individuals
Providing access to credit monitoring services for twelve (12) months, through Equifax
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(276 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+95d

Oregon State AG+95d

Montana State AG+95d

Maine State AG+95d

South Carolina State AG+95d

Indiana State AG+95d

Washington State AG+95d · this page

New Hampshire State AG+100d

California State AG+110d

Pattern: first filing Jan 1 (IL), last Apr 21 (CA) — a 110-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA7710.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 6, 2022
Raw hash: c44725fab76e04a8089905da9c930217d40e574caa5e3000a160ac6bc9d9bf3c

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityDialAmerica Marketing, Inc.

Victim entityDialAmerica Marketing, Inc.

Incidentdiscovered Jul 4, 2021

Stated responseLaunched a privileged forensic investigation, with the assistance of third-party cybersecurity specialists

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com