HackingManufacturingManufacturingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
BLUEGRASS INGREDIENTS, INC.
bd_0413c55f51979db8 · schema v1 · pii pii-v1
Full breach record for BLUEGRASS INGREDIENTS, INC. →Between November 5–10, 2024, an unauthorized external actor gained access to Bluegrass Ingredients, Inc.'s network and copied certain files. The breach was discovered on June 6, 2025 after a comprehensive review of impacted files. Affected data includes names and Social Security numbers. Three Maine residents were affected out of 2,166 total. Bluegrass notified federal law enforcement, provided credit monitoring via Experian (12 months), and enhanced security protocols.
Leak gap clock⏱ Leak >90d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 169 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_c2a25fa646f99a74Leak Siteakirafiled 2025-01-06(169d gap)Candidate
- bd_3c08beb22057e64eLeak Siteakirafiled 2024-11-05(232d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b7fc5c52-61ca-4927-8df4-7a32d9534120.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 25, 2025
- Raw hash
- 584db5cbbe8cf1d265c7806798514be3eaf64e49a2d6f0e3e1e5a0f181a5e553
Reporting entity
- Name
- BLUEGRASS INGREDIENTS, INC.norm: bluegrass ingredients
- Domain
- bluegrassingredients.com
- Industry
- Other Commercial
Victim entity
- Name
- BLUEGRASS INGREDIENTS, INC.norm: bluegrass ingredients
- Domain
- bluegrassingredients.com
- Industry
- Other Commercial
- Industry
- Manufacturingllm
Incident
- Discovered
- Jun 6, 2025
- Materiality determined
- —
- Notification sent
- Jun 25, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified relevant state regulatorsNotified federal law enforcement
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 6, 2025→ Filed with AG: Jun 25, 202519d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.