MalwareManufacturingManufacturingRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountHighContained

DAK Americas, LLC

bd_f9210aec735925b1 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 15, 2020

Filed

Jun 5, 2020

To disclose

12 weeks

Affected · nationwide

3,0001,802 in this filing

Linked

5 filings

Confidence

66%

Full breach record for DAK Americas, LLC →

DAK Americas, LLC notified South Carolina consumers of a March 15, 2020 ransomware incident affecting a legacy virtual server. The breach potentially impacted over 3,000 current and former employees, exposing names, SSNs, driver's license numbers, and salary data. The company contained the breach within 24 hours, engaged forensic investigators and law enforcement, and provided 24 months of complimentary credit monitoring via NortonLifeLock. No evidence of data misuse was found.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due12 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 12 weeks / 82 days

Mar 15, 2020

Discovered

Jun 5, 2020

Filed

vs. sector median

+1 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_f565c4016adbbb3d2020-06-04 · +1dVerified
Indiana State AGbd_60e65c1823e42e342020-06-08 · +3dVerified
Montana State AGbd_c41d7be7767e90dc2020-06-02 · +3dCandidate
New Hampshire State AGbd_fae4c68d68cf8ee32020-06-10 · +5dVerified

Name: DAK Americas, LLC
norm: dak americas

Name: DAK Americas, LLC
norm: dak americas
Industry: Manufacturingllm

Discovered: Mar 15, 2020
Materiality determined: —
Notification sent: Jun 2, 2020
Affected individuals: 3,000state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified South Carolina Office of the Attorney General (Consumer Affairs)
Initial access: valid_credentials

During the incident: Engaged third-party vendors and law enforcement to investigate
Disabled access to the affected server
Hired a cybersecurity firm to conduct a global investigation
Engaged Parker Poe, a law firm
Cooperated with law enforcement officials
Changes made: Implemented increased security measures
Conducted additional employee training
Initiated dark web monitoring
Reviewing policies and procedures relating to data security
Provided 24 months of complimentary identity and credit monitoring services through NortonLifeLock
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(82 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJun 2 · first

Massachusetts State AG+2d

South Carolina State AG+3d · this page

Indiana State AG+6d

New Hampshire State AG+8d

Pattern: first filing Jun 2 (MT), last Jun 10 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/DAKAmericas.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2020
Raw hash: 3186e95dd41ca5e1f928a99e3390b635b6feb45c610fec3852b3fbb727ce077b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDAK Americas, LLC

Victim entityDAK Americas, LLC

Incidentdiscovered Mar 15, 2020

Stated responseEngaged third-party vendors and law enforcement to investigate

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov