MalwareManufacturingManufacturingRansomwareData EncryptedTargetedIdentity (basic)Government IDEmploymentHighContained

DAK Americas, LLC

bd_fae4c68d68cf8ee3 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 15, 2020

Filed

Jun 10, 2020

To disclose

12 weeks

Affected

3,000scope not determined

Linked

5 filings

Confidence

65%

Full breach record for DAK Americas, LLC →

DAK Americas LLC, a global manufacturing company, notified the NH AG of a ransomware incident. Attackers encrypted a legacy server on March 15, 2020. Over 3,000 current/former employees were affected. Data included names, SSNs, driver's licenses, and salary info. No evidence of data exfiltration. DAK contained the breach, engaged forensic investigators and law enforcement, and provided 24 months of LifeLock monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 12 weeks / 87 days

Mar 14, 2020

Begins

Mar 15, 2020

Discovered

Jun 10, 2020

Filed

vs. sector median

+2 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_60e65c1823e42e342020-06-08 · +2dVerified
South Carolina State AGbd_f9210aec735925b12020-06-05 · +5dVerified
Massachusetts State AGbd_f565c4016adbbb3d2020-06-04 · +6dVerified
Montana State AGbd_c41d7be7767e90dc2020-06-02 · +8dCandidate

Name: DAK Americas LLC
norm: dak americas
Domain: dak.com

Name: DAK Americas, LLC
norm: dak americas
Industry: Manufacturingllm

Discovered: Mar 15, 2020
Breach occurred: Mar 14, 2020 – Mar 15, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jun 5, 2020
Affected individuals: 3,000scope not determined
Data types: Identity (basic)Government IDEmployment
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Isolated and shut down the infected systems
Coordinated with law enforcement
Worked with an independent cybersecurity company
Engaged Parker Poe, a law firm
Disabled access to the affected server
Hired a cybersecurity firm to conduct a global investigation
Cooperated with law enforcement officials
Changes made: Increased password security requirements for administrative accounts
Eliminated certain domain mailboxes
Deployed next generation endpoint protections on all systems
Isolated legacy systems
Initiated dark web monitoring
Increased restrictions on remote access to corporate servers
Conducted additional employee training
Reviewing policies and procedures relating to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJun 2 · first

Massachusetts State AG+2d

South Carolina State AG+3d

Indiana State AG+6d

New Hampshire State AG+8d · this page

Pattern: first filing Jun 2 (MT), last Jun 10 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dak-americas-20200610.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 10, 2020
Raw hash: c6c2e7dbfca957cc4d8cd8c11a703c3085b467f63689ba587b630a41c879801f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDAK Americas LLC

Victim entityDAK Americas, LLC

Incidentdiscovered Mar 15, 2020

Stated responseIsolated and shut down the infected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov