MalwareRansomwareStolen CredentialsRansom DemandedData ExfiltratedEmployee Data InvolvedPIILowContained
Storopack, Inc.
bd_1c091426314ea4ad · schema v1 · pii pii-v1
Full breach record for Storopack, Inc. →Storopack, Inc. reported that its German parent company, Storopack Hans Reichenecker GmbH, was impacted by a ransomware attack that began on March 15, 2023. The incident was discovered on March 21, 2023, when systems were encrypted and a ransom was demanded. The attackers misused administrative privileges to access the network. On June 12, 2023, it was learned that personal information of employees was taken during the attack. The company offered affected individuals 24 months of credit monitoring.
Maine clockDiscovered Mar 21, 2023 → Filed with AG Jul 7, 2023108d ✗ ME AG >90d15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d38350ad-f596-41a0-973f-c3096464c750.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2023
- Raw hash
- 3eeb3dea809f66ed995697a09f0eccc65011912408fe4fc570f7a152f5045a53
Reporting entity
- Name
- Storopack, Inc.norm: storopack
Victim entity
- Name
- Storopack, Inc.norm: storopack
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- —
- Notification sent
- Jun 29, 2023
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- ME AG >90d · 108dME resident >60d · 100d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 21, 2023→ Filed with AG: Jul 7, 2023108d 90 days ME AG >90d Maine Discovered: Mar 21, 2023→ Notified: Jun 29, 2023100d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.