Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with forensic investigation team, third party assistance with epiq (credit monitoring services), and and containment measures with securing it environment, and remediation measures with identifying affected data, remediation measures with notifying customers and individuals, and communication strategy with direct notice to affected individuals, communication strategy with public disclosure to massachusetts attorney general, communication strategy with customer support contact (phone/mail)..

Common Attack Types: The most common types of attacks the company has faced is Ransomware.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Social Security Numbers, Organizational Data and .

Third-Party Assistance: The company involves third-party assistance in incident response through forensic investigation team, Epiq (credit monitoring services), .

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: identifying affected data, notifying customers and individuals, .

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by securing it environment and .

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Massachusetts Attorney General Office Disclosure, and Source: SAFEPAY Dark Web Forum PostDate Accessed: 2025-06-03, and Source: Digital WarRoom Customer Notice.

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Direct Notice To Affected Individuals, Public Disclosure To Massachusetts Attorney General and Customer Support Contact (Phone/Mail).

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were contact_phone: 206-798-5350 (Mon-Fri, 9 a.m. to 5 p.m. ET), contact_mail: P.O. Box 10340, Bainbridge Island, WA 98110, services_offered: ['24 months of credit monitoring', 'identity restoration services'] and .

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Forensic Investigation Team, Epiq (Credit Monitoring Services), .

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Securing It Environment, Customer Notification, Credit Monitoring Services, .

Last Attacking Group: The attacking group in the last incident was an SAFEPAY (ransomware group).

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2025-10-24.

Most Significant Data Compromised: The most significant data compromised in an incident were Social Security numbers, 500 GB of organizational data and .

Most Significant System Affected: The most significant system affected in an incident was IT network.

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was forensic investigation team, epiq (credit monitoring services), .

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was securing IT environment.

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were 500 GB of organizational data and Social Security numbers.

Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Consider placing fraud alerts or credit freezes with major credit bureaus., Review account statements and monitor credit reports regularly., Enroll in 24 months of complimentary credit monitoring and identity restoration services (via Epiq). and Remain vigilant for signs of identity theft or fraud..

Most Recent Source: The most recent source of information about an incident are SAFEPAY Dark Web Forum Post, Massachusetts Attorney General Office Disclosure and Digital WarRoom Customer Notice.

Current Status of Most Recent Investigation: The current status of the most recent investigation is forensic investigation initiated; ongoing remediation.

Most Recent Customer Advisory: The most recent customer advisory issued were an contact_phone: 206-798-5350 (Mon-Fri, 9 a.m. to 5 p.m. ET), contact_mail: P.O. Box 10340, Bainbridge Island, WA 98110, services_offered: ['24 months of credit monitoring', 'identity restoration services'] and .