MalwareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Valex Group
bd_ea706d99e0c25784 · schema v1 · pii pii-v1
Full breach record for Valex Group →Valex Corporation reported a malware incident on July 1, 2021, where an unknown actor encrypted systems and exfiltrated data between June 30 and July 1, 2021. The breach potentially exposed names, dates of birth, and Social Security numbers of individuals. Valex secured systems, restored access, and offered 24 months of credit monitoring. The incident was reported to California regulators.
California clockDiscovered Jul 1, 2021 → Notified Aug 25, 2022420d ✗ CA 60-day late14 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-556643
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2022
- Raw hash
- 503aef63388d58ef26f9722edd2ebc473309b404af9775427afc00ffe957ecd6
Reporting entity
- Name
- Valex Groupnorm: valex group
- Domain
- valexgroup.com
Victim entity
- Name
- Valex Groupnorm: valex group
- Domain
- valexgroup.com
Incident
- Discovered
- Jul 1, 2021
- Materiality determined
- —
- Notification sent
- Aug 25, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this event to appropriate state regulators
Compliance
- Time to disclose
- 14 months(420 days from discovery to filing)
- Compliance flags
- CA 60-day late · 420d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 1, 2021→ Notified: Aug 25, 2022420d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.