DisclosureLens
HackingTechnologyProfessional ServicesInformationCustomer Data InvolvedPIIIdentity (basic)LowContained

Smart ERP Solutions

bd_0622199b964a7868 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 13, 2024

Filed

Jan 13, 2025

To disclose

26 weeks

Affected

2state residents only

Linked

14 filings

Confidence

65%
Full breach record for Smart ERP Solutions →2 incidents on file

Smart ERP Solutions, Inc. notified the New Hampshire Attorney General of a July 13, 2024 network security incident affecting two McLane Company, Inc. residents. Unauthorized access to personal information was confirmed on November 7, 2024. Notices were sent to affected individuals starting December 23, 2024, offering one year of Experian IdentityWorks credit monitoring.

Leak gap clock✗ Leak >180d26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 26 weeks / 184 days

Jul 13, 2024

Begins

Jul 13, 2024

Discovered

Jan 13, 2025

Filed

vs. sector median

+8 wks slower

This filing is one of 14 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 184 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 60d gap

Showing first 10 of 13 linked disclosures.

Filing propagation · 11 filings · 10 states

View merged incident ↗
New Hampshire State AGJan 13 · first · this page
Indiana State AG+57d
Maine State AG+57d
Maryland State AG+57d
Oregon State AG+57d
Washington State AG+57d
California State AG+57d
Vermont State AG+57d
Nebraska State AG+57d
Montana State AG+57d
New Hampshire State AG+60d

Pattern: first filing Jan 13 (NH), last Mar 14 (NH) — a 60-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.