MalwareProfessional ServicesProfessional ServicesRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDMedium

Cascade Coffee

bd_fe813b5db3dfcd9a · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 30, 2026

Filed

Aug 26, 2026

To disclose

27 days

Affected

610state residents only

Linked

2 records

Confidence

95%

Full breach record for Cascade Coffee →

Cascade Coffee, LLC, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2026-07-30 and filed notice on 2026-08-26. 610 Washington residents were affected. 27 days elapsed between awareness and notification. 0 days to identify the breach. 0 days to contain the breach.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d27 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 27 days

Jul 30, 2026

Discovered

Aug 26, 2026

Filed

vs. sector median

16 wks faster

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_c353ce3f8bcecbde2026-07-30 · +27dCandidate

Name: Cascade Coffee
norm: cascade coffee
Domain: cascadecoffee.com

Name: Cascade Coffee
norm: cascade coffee
Domain: cascadecoffee.com
Industry: Professional Servicesllm

Discovered: Jul 30, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 610state-resident count only
Data types: Identity (basic)Government ID
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
Threat actor: ExternalFinancial

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://data.wa.gov/resource/sb4j-ca4h.json?id=25274
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 26, 2026
Raw hash: 2d7920fe125608e248608d5f087182711b38aab542e81999e4e0ad5c03594226

Linked disclosures

Ransomware claims (1)

Reporting entityCascade Coffee

Victim entityCascade Coffee

Incidentdiscovered Jul 30, 2026

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenancedata.wa.gov