MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDHighContained

ProMed Molded Products, Inc.

bd_07c0c07df66c533c · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 21, 2022

Filed

Jun 17, 2022

To disclose

17 weeks

Affected · nationwide

1,1051 in this filing

Confidence

67%

Full breach record for ProMed Molded Products, Inc. →2 incidents on file

ProMed Molded Products, Inc. disclosed a cybersecurity incident discovered on February 21, 2022, involving unauthorized access, file encryption, and data exfiltration. Approximately 1,105 individuals across 15 states and Puerto Rico were affected. Impacted data included names, SSNs, and driver's license numbers. ProMed engaged forensic investigators, notified the FBI, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 116 days

Feb 21, 2022

Discovered

Jun 17, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,105 affectedView incident

Name: ProMed Molded Products, Inc.
norm: promed molded products

Name: ProMed Molded Products, Inc.
norm: promed molded products
Industry: Manufacturingllm

Discovered: Feb 21, 2022
Materiality determined: —
Notification sent: Apr 21, 2022
Affected individuals: 1,105state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Engaged a leading cybersecurity firm to assist with an investigation
Took steps to secure our digital environment
Implemented additional security features to reduce the risk of a similar incident occurring in the future
Notified the Federal Bureau of Investigation
Offered complimentary credit monitoring and identity protection services
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-59.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2022
Raw hash: 41f104a6194622fba238c8a586efc299cc6d393ade656e6345528fd94eb6a338

Reporting entityProMed Molded Products, Inc.

Victim entityProMed Molded Products, Inc.

Incidentdiscovered Feb 21, 2022

Stated responseEngaged a leading cybersecurity firm to assist with an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov