Krapf Group
ent_ab9bc1403d3f0ca9f3dd84ab
Disclosures
6
State AG · HHS OCR · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
15,795
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Krapf Group
- Normalized
- krapf group— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- New Hampshire State AGas victim2021-01-19
Krapf Group, a professional services firm, notified the New Hampshire Attorney General of a cybersecurity incident affecting one resident. On November 23, 2020, Krapf discovered an unauthorized actor gained access to its network between November 17-25, 2020. The actor downloaded ransomware files and exfiltrated data including payroll records and Social Security numbers. No encryption was executed. Krapf engaged forensic firm Crypsis, deployed endpoint security, and offered one year of credit monitoring to the affected individual.
- PENNSYLVANIAHHS OCRas victim2021-01-19
Krapf Group, a health plan provider, reported a ransomware attack to HHS on January 19, 2021, affecting 610 individuals. The breached information was located on a network server and included names, dates of birth, addresses, Social Security numbers, and health insurance information. In response, the entity implemented additional security safeguards.
- Indiana State AGas victim2021-01-15
Krapf Group reported a data breach to the Indiana Attorney General. The breach occurred on 2020-11-17 and was reported on 2021-01-15. 7 Indiana residents were affected. 15,795 individuals affected in total.
- Delaware State AGas victim2021-01-15
The Krapf Group experienced a cybersecurity incident where an unauthorized actor accessed its network on or around November 17, 2020, and exfiltrated personal information including names, dates of birth, addresses, and Social Security numbers. The breach was discovered on November 23, 2020. The company engaged forensic investigators and is offering one year of Experian IdentityWorks monitoring to affected individuals. The investigation was ongoing as of the January 15, 2021 notification date.
- Massachusetts State AGas victim2021-01-15
Krapf Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-01-15. 3 Massachusetts residents were affected. The report records the breach type as electronic.
- Illinois State AGas victim2021-01-01
THE KRAPF GROUP filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-018). The register records the breach as discovered on November 23, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.