MalwareTechnologyInformationRansomwareData EncryptedRansom DemandedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDFinancial accountMediumActive

Ampex Data Systems

bd_f61a1973de4b2535 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 21, 2026

Filed

May 26, 2026

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

67%

Full breach record for Ampex Data Systems →

Delta Information Systems, Inc. (via subsidiary Ampex Data Systems Corporation) disclosed a cybersecurity incident on March 21, 2026, where a threat actor accessed and encrypted network data. The incident involved PII (name, address, SSN, DOB) of contractors, employees, and dependents. Response included server shutdown, forensic investigation, FBI/DC3 notification, and ransom negotiation. Credit monitoring services are offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

Mar 21, 2026

Discovered

May 26, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 134 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteplaybd_571e436d5a1335c12026-03-30 · +56dVerified
Leak Siteplaybd_cde8e1e1cbada45f2026-01-12 · +134dVerified by operator

Regulatory filings (4) · sorted by filing gap

California State AGbd_5a80584f7d8fe5e92026-05-27 · +1dVerified
Massachusetts State AGbd_68635f5ae613817a2026-05-19 · +7dVerified by operator
Maine State AGbd_6c8fa41d68c176072026-05-18 · +8dVerified by operator
Indiana State AGbd_56ff4da0557796012026-03-26 · +61dVerified by operator

Name: Delta Information Systems
norm: delta information
Domain: acroamatics.com

Name: Ampex Data Systems
norm: ampex data
Domain: ampex.com
Industry: Technologyllm

Discovered: Mar 21, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI’s Internet Crime Complaint Center (IC3)Notified the Department of Defense Cyber Crime Center (DC3)Continuing to work with the FBI to assist in its investigation
Initial access: valid_credentials

During the incident: Informed our IT Security Consultants and shut down our servers
Engaged with a specialized Forensic IT firm and Cyber Counsel to investigate and remediate the situation
Notified the FBI’s Internet Crime Complaint Center (IC3) and the Department of Defense Cyber Crime Center (DC3)
Worked with an incident response service to negotiate with the threat actors to prevent the release of any information
Engaged an IT Security firm to assist us in restoring our servers and improving our IT Security posture going forward
Reviewing our IT policies and procedures to ensure all security measures are in place to improve the security of our information network and related systems and to prevent such an incident from occurring again
Continuing to work with the FBI to assist in its investigation and have updated our IC3 and DC3 reports
Changes made: Restoring our servers and improving our IT Security posture going forward
Reviewing our IT policies and procedures to ensure all security measures are in place to improve the security of our information network and related systems and to prevent such an incident from occurring again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMar 26 · first

Maine State AG+53d

Massachusetts State AG+54d

Nebraska State AG+61d · this page

California State AG+62d

Pattern: first filing Mar 26 (IN), last May 27 (CA) — a 62-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/9b8e1cd6-3786-439c-9635-cd2ab620772e.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2026
Raw hash: f7aa0a250d3c59c58a6b7e3309e9eccda740244ae6d8d1efbc950b357be4b0a1

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityDelta Information Systems

Victim entityAmpex Data Systems

Incidentdiscovered Mar 21, 2026

Stated responseInformed our IT Security Consultants and shut down our servers

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov