Social EngineeringProfessional ServicesProfessional ServicesPhishingTargetedData ExfiltratedIdentity (basic)MediumContained

Patinkin Research Strategies, LLC

bd_da7d1445062e3004 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 7, 2025

Filed

Jun 6, 2025

To disclose

9 weeks

Affected

28,614state residents only

Confidence

70%

Full breach record for Patinkin Research Strategies, LLC →

Patinkin Research Strategies, LLC reported a phishing incident in Washington affecting 28,614 residents. Unauthorized access occurred April 2-7, 2025, exposing names and dates of birth. The company engaged forensic investigators to resecure systems.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days

discovery → filing · 9 weeks / 60 days

Apr 2, 2025

Begins

Apr 7, 2025

Discovered

Jun 6, 2025

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed28,614 affectedView incident

Name: Patinkin Research Strategies, LLC
norm: patinkin research strategies
Industry: Non-Profit/Charity

Name: Patinkin Research Strategies, LLC
norm: patinkin research strategies
Industry: Non-Profit/Charity
Industry: Professional Servicesllm

Discovered: Apr 7, 2025
Breach occurred: Apr 2, 2025 – Apr 7, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 28,614state-resident count only
Data types: Identity (basic)
Data elements: NameDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Employing a leading forensic IT firm to resecure our systems and investigate the extent of the data exposure
Working in conjunction with the firm to deploy cybersecurity best practices
Changes made: Deploy cybersecurity best practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA33534.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2025
Raw hash: 5c395b4414f70b1cc5c8e5a5e80b4c8dd6751fbf3a9f45b9876f3754c437cd4e

Reporting entityPatinkin Research Strategies, LLC

Victim entityPatinkin Research Strategies, LLC

Incidentdiscovered Apr 7, 2025

Stated responseEmploying a leading forensic IT firm to resecure our systems and investigate the extent of the data exposure

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com