MalwareRansomwareData EncryptedData ExfiltratedRansom DemandedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Pawn America Minnesota, LLC
bd_fd91e2de57e28f3e · schema v1 · pii pii-v1
Full breach record for Pawn America Minnesota, LLC →Pawn America Minnesota, LLC experienced a ransomware attack on September 28, 2021. A cybercriminal gained access to computer systems, encrypted data, and exfiltrated personal information including names, addresses, phone numbers, email addresses, driver's license numbers, social security numbers, and passport numbers. The company restored data from backups, engaged cybersecurity experts, notified law enforcement, and offered one year of identity monitoring through Epiq.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1cb8803a201fac1dMaine State AGfiled 2021-11-19Candidate
- bd_14f1f584d87b2e66Oregon State AGfiled 2021-11-22(3d gap)Verified
- bd_8af872d69da9a540Washington State AGfiled 2021-12-06(17d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-547797
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2021
- Raw hash
- a4f483b2de7c05ed9304022de6f050f2aaf302fdda3c75020274968ed71c15d9
Reporting entity
- Name
- Pawn America Minnesota, LLCnorm: pawn america minnesota
Victim entity
- Name
- Pawn America Minnesota, LLCnorm: pawn america minnesota
Incident
- Discovered
- Sep 28, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Informed law enforcement
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.