MalwareOtherRansomwareData ExfiltratedData PublishedIdentity (basic)Government IDEmploymentMediumContained

The Walman Optical Company

bd_f3d387fcb7d32407 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 21, 2020

Filed

Mar 19, 2021

To disclose

30 weeks

Affected

146state residents only

Linked

6 filings

Confidence

63%

Full breach record for The Walman Optical Company →

Walman Opitcal Company notified Montana residents of a ransomware attack on August 21, 2020. The attack resulted in data exfiltration and posting on the Internet. Personal information including names, SSNs, DOBs, and employment data may have been exposed. No indication was found that personal data was actually accessed or downloaded. The company engaged ESX and forensic investigators, cooperated with the FBI, and offered one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 30 weeks / 210 days

Aug 21, 2020

Begins

Aug 21, 2020

Discovered

Mar 19, 2021

Filed

vs. sector median

+24 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_a7796964f5b4b45d2021-03-19Candidate
Massachusetts State AGbd_6389bbf5052af2c22021-03-31 · +12dVerified
New Hampshire State AGbd_9a55e9d851bbd8d72021-03-31 · +12dVerified
Maine State AGbd_dccf7e0c9aae75cb2021-03-31 · +12dVerified

Show 1 more filing ↓up to 12d gap

Maine State AGbd_e1cab310c23362532021-03-31 · +12dVerified

Name: The Walman Optical Company
norm: the walman optical
Domain: walmanoptical.com

Name: The Walman Optical Company
norm: the walman optical
Domain: walmanoptical.com
Industry: Otherllm

Discovered: Aug 21, 2020
Breach occurred: Aug 21, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 146state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Cooperated with the FBI as they investigated the group that conducted the attack

During the incident: Engaged ESX, a respected security company, to work with us to stop the attack and restore our computer systems to normal operations
Cooperated with the FBI as they investigated the group that conducted the attack
Engaged an independent cyber forensics company to analyze the information on the server
Changes made: Implemented several security improvements to strengthen our network and data security
Changed the way we store personal information to reduce potential exposure
Offering identity monitoring services for one year from Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGMar 19 · first

Montana State AGMar 19 · first · this page

Massachusetts State AG+12d

New Hampshire State AG+12d

Maine State AG+12d

Pattern: first filing Mar 19 (IN), last Mar 31 (ME) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Walman-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2021
Raw hash: 204af497341f2bcb948ffea515f9f023253c00626bd05ca7ae7f2ca3dcf6bfb3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityThe Walman Optical Company

Victim entityThe Walman Optical Company

Incidentdiscovered Aug 21, 2020

Stated responseEngaged ESX, a respected security company, to work with us to stop the attack and restore our computer systems to normal operations

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov