HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
USA Rice Federation
bd_0113773efedde57b · schema v1 · pii pii-v1
Full breach record for USA Rice Federation →USA Rice Federation notified the Maryland Attorney General of a cybersecurity incident discovered on February 5, 2025. Unauthorized access resulted in the potential exposure of names and Social Security numbers for 12 Maryland residents. The company engaged forensic investigators, secured systems, and offered 12 months of credit monitoring via TransUnion/Cyberscout. The investigation is ongoing.
Leak gap clock✗ Leak >180d15 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident
A leak claim by kairos about this victim predates this filing by 415 days.View originating leak claim
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376732.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2026
- Raw hash
- 556795e49101526eb962c5f256d6fd28d0cb93803a8f7a2daea32a3ab24b5222
Reporting entity
- Name
- USA Rice Federationnorm: usa rice federation
- Domain
- usarice.com
Victim entity
- Name
- USA Rice Federationnorm: usa rice federation
- Domain
- usarice.com
Incident
- Discovered
- Feb 5, 2025
- Materiality determined
- —
- Notification sent
- Mar 26, 2025
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(442 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.