MalwareProfessional ServicesRansomwareCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDHighResolved

RITCHIE BROS. AUCTIONEERS (AMERICA) INC.

bd_10b3feb251797d27 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 14, 2021

Filed

Mar 11, 2022

To disclose

17 weeks

Affected · nationwide

9,5661 in this filing

Linked

7 filings

Confidence

50%

Full breach record for RITCHIE BROS. AUCTIONEERS (AMERICA) INC. →

Ritchie Bros. Auctioneers, a Canada-based company, reported a ransomware incident that occurred between October 28, 2021, and November 15, 2021. The breach was discovered on November 14, 2021. The incident affected 9,566 individuals in total, including one resident of Maine. The compromised information includes names and Social Security numbers. The company began notifying affected individuals on March 11, 2022, and offered two years of complimentary identity monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 14, 2021 → Filed with AG Mar 11, 2022117d ✗ ME AG >90d17 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 17 days

discovery → filing · 17 weeks / 117 days

Oct 28, 2021

Begins

Nov 14, 2021

Discovered

Mar 11, 2022

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_530dfff8d972625f2022-03-11Candidate
Indiana State AGbd_8d95ab0c2c4a1f612022-03-11Verified
California State AGbd_c382eb9185854c8d2022-03-11Verified
Montana State AGbd_e0162dd86b6caf672022-03-11Candidate

Show 2 more filings ↓up to 3d gap

Massachusetts State AGbd_e7497102317972c42022-03-11Verified
New Hampshire State AGbd_ca9a43b20dc4172c2022-03-14 · +3dVerified

Name: RITCHIE BROS. AUCTIONEERS (AMERICA) INC.
norm: ritchie bros auctioneers america

Name: RITCHIE BROS. AUCTIONEERS (AMERICA) INC.
norm: ritchie bros auctioneers america

Discovered: Nov 14, 2021
Breach occurred: Oct 28, 2021 – Nov 15, 2021
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 11, 2022
Affected individuals: 9,566state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
Threat actor: ExternalFinancial

Changes made: Offered complimentary identity monitoring to affected individuals for two years through Kroll, including Credit Monitoring and Identity Theft Restoration.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(117 days from discovery to filing)
Compliance flags: ME AG >90d · 117d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 14, 2021
→ Filed with AG: Mar 11, 2022
117d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 14, 2021 → Filed with AG: Mar 11, 2022	117d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Maine State AGMar 11 · first

Indiana State AGMar 11 · first

California State AGMar 11 · first

Montana State AGMar 11 · first

Massachusetts State AGMar 11 · first

Maine State AGMar 11 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/642bed37-06a2-402e-82a0-6570f80996a5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 11, 2022
Raw hash: 3dd66f39f893611aff4a435f3613d150440c72ae042edc863c89371179837693

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityRITCHIE BROS. AUCTIONEERS (AMERICA) INC.

Victim entityRITCHIE BROS. AUCTIONEERS (AMERICA) INC.

Incidentdiscovered Nov 14, 2021

Stated responseOffered complimentary identity monitoring to affected individuals for two years through Kroll, including Credit Monitoring and Identity Theft Restoration.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov