HackingOtherStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Mark Dunning Industries Inc.

bd_06a545fbd47e3b1c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 22, 2024

Filed

Feb 12, 2025

To disclose

16 weeks

Affected · nationwide

7601 in this filing

Linked

7 filings

Confidence

65%

Full breach record for Mark Dunning Industries Inc. →

Mark Dunning Industries Inc. reported unauthorized access to IT systems on November 7, 2023, discovered October 22, 2024. 760 individuals affected, including 1 Maine resident. Data included names, DOB, addresses, driver's license numbers, financial account info, PHI, and health insurance info. The company engaged forensic professionals, ceased access, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 22, 2024 → Filed with AG Feb 12, 2025113d ✗ ME AG >90d16 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 350 days

discovery → filing · 16 weeks / 113 days

Nov 7, 2023

Begins

Oct 22, 2024

Discovered

Feb 12, 2025

Filed

vs. sector median

+8 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_a7f303444fcb863f2025-02-13 · +1dVerified
Maryland State AGbd_a9252d44adca46ca2025-02-11 · +1dVerified
New Hampshire State AGbd_d88139918256f5c32025-02-11 · +1dVerified
Indiana State AGbd_0b093f259df356e22025-02-07 · +5dCandidate

Show 2 more filings ↓up to 44d gap

Nebraska State AGbd_2d3ea94e9b6009872025-03-13 · +29dVerified
New Hampshire State AGbd_fb3c09d2d0b23dfd2025-03-28 · +44dVerified

Name: The Beckage Firm
norm: the beckage firm
Domain: thebeckagefirm.com

Name: Mark Dunning Industries Inc.
norm: mark dunning
Industry: Otherllm

Discovered: Oct 22, 2024
Breach occurred: Nov 7, 2023
Undetected for: 350 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 7, 2025
Affected individuals: 760state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation
Engaged an incident response team and data security professionals
Stopped the unauthorized access
Changes made: Providing twelve months of credit monitoring services
Providing fully managed id theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: ME AG >90d · 113dME resident >60d · 108d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 22, 2024
→ Filed with AG: Feb 12, 2025
113d 90 days ME AG >90d
Maine
Discovered: Oct 22, 2024
→ Notified: Feb 7, 2025
108d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 22, 2024 → Filed with AG: Feb 12, 2025	113d	90 days	ME AG >90d
Maine	Discovered: Oct 22, 2024 → Notified: Feb 7, 2025	108d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Indiana State AGFeb 7 · first

Maryland State AG+4d

New Hampshire State AG+4d

Maine State AG+5d · this page

Massachusetts State AG+6d

Nebraska State AG+34d

New Hampshire State AG+49d

Pattern: first filing Feb 7 (IN), last Mar 28 (NH) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7cb1d435-0f43-4c1f-8561-751e3947d4e6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2025
Raw hash: 273beb5d8a779bf175e3371b64bb0b338447435e9cde7c5af0380dde559b7388

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe Beckage Firm

Victim entityMark Dunning Industries Inc.

Incidentdiscovered Oct 22, 2024

Stated responseLaunched an investigation

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov