MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
McDougall & Sons, Inc.
bd_fd2b1590792830b2 · schema v1 · pii pii-v1
Full breach record for McDougall & Sons, Inc. →McDougall & Sons, Inc. experienced a ransomware attack on January 10-12, 2021, resulting in system encryption and unauthorized network access. The breach impacted personal information including Social Security numbers and dates of birth. The company engaged forensic experts, reported the incident to the FBI, and offered 12 months of identity theft protection services to affected individuals.
California clockDiscovered Jan 11, 2021 → Notified Apr 13, 202192d ✗ CA 60-day late13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9ca2dbf0f7d7ec05Washington State AGfiled 2021-04-09Candidate
- bd_3c3b268fe521e73eMontana State AGfiled 2021-04-15(6d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539846
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 9, 2021
- Raw hash
- c33299d098c40c924b0c548cf908253c464f2c0f6f1e3cc8aaf5d7a3f8bd7d77
Reporting entity
- Name
- McDougall & Sons, Inc.norm: mcdougall sons
Victim entity
- Name
- McDougall & Sons, Inc.norm: mcdougall sons
Incident
- Discovered
- Jan 11, 2021
- Materiality determined
- Mar 18, 2021
- Notification sent
- Apr 13, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to the Federal Bureau of Investigationnotified regulatory agencies
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- CA 60-day late · 92d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 11, 2021→ Notified: Apr 13, 202192d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.