HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

ASMFC: Atlantic States Marine Fisheries Commission

bd_1488322330afd4be · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 6, 2024

Filed

Jun 28, 2024

To disclose

12 weeks

Affected

4state residents only

Linked

7 filings

Confidence

65%

Full breach record for ASMFC: Atlantic States Marine Fisheries Commission →

Atlantic States Marine Fisheries Commission notified 15 states of a cybersecurity incident occurring March 14–April 6, 2024. Unauthorized access affected names, SSNs, bank details, and ID copies. Law enforcement was notified, systems secured, and IDX identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 23 days

discovery → filing · 12 weeks / 83 days

Mar 14, 2024

Begins

Apr 6, 2024

Discovered

Jun 28, 2024

Filed

vs. sector median

+1 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Site8basebd_cdcd3bad1829f42f2024-04-15 · +74dVerified by operator

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_726cfd676d23a28b2024-06-28Verified
Massachusetts State AGbd_5a7397fc9e658c222024-07-01 · +3dVerified by operator
Maine State AGbd_b4fb1ab69fdd8c232024-07-01 · +3dVerified by operator
New Hampshire State AGbd_bbdb037c54a80cf62024-07-03 · +5dVerified

Show 1 more filing ↓up to 17d gap

Massachusetts State AGbd_7a8bc6310304f49e2024-06-11 · +17dVerified by operator

Name: ASMFC: Atlantic States Marine Fisheries Commission
norm: asmfc atlantic states marine fisheries commission
Domain: asmfc.org

Name: ASMFC: Atlantic States Marine Fisheries Commission
norm: asmfc atlantic states marine fisheries commission
Domain: asmfc.org
Industry: Governmentllm

Discovered: Apr 6, 2024
Breach occurred: Mar 14, 2024 – Apr 6, 2024
Undetected for: 23 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 26, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Promptly notified law enforcement
Took immediate steps to secure systems
Restored operations
Investigated the nature and scope of the Incident
Augmented security practices
Offered complimentary identity theft protection services through IDX
Changes made: Augmented security practices to minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Massachusetts State AGJun 11 · first

Vermont State AG+17d

Montana State AG+17d · this page

Massachusetts State AG+20d

Maine State AG+20d

New Hampshire State AG+22d

Pattern: first filing Jun 11 (MA), last Jul 3 (NH) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1512.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2024
Raw hash: 8bd1e59627a0afcfdc3dfad38363a06034974807c81f262cb87db7ed6a9eb83d

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityASMFC: Atlantic States Marine Fisheries Commission

Victim entityASMFC: Atlantic States Marine Fisheries Commission

Incidentdiscovered Apr 6, 2024

Stated responsePromptly notified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov