UnknownEmployee Data InvolvedData PublishedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumActive
MAXCO SUPPLY, INC.
bd_1efcbf8c04aedb2a · schema v1 · pii pii-v1
Full breach record for MAXCO SUPPLY, INC. →Maxco Supply, Inc. notified employees on Dec 28, 2023, that confidential information (names, SSNs, DOBs, addresses, tax/employment data) for past and present employees may have been released on the Dark Web between July and Oct 2023. The incident was discovered on Dec 8, 2023, when an employee reported a letter indicating the exposure. The source of the breach is unknown; Maxco retained cybersecurity experts, notified the FBI, and is reviewing controls. No specific attack vector or threat actor was identified.
Leak gap clock⏱ Leak >30d20 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_aa9d6b31716252b1Leak Sitemoneymessagefiled 2023-10-03(86d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578536
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 28, 2023
- Raw hash
- 416600ee89740ae66120a3338fc0f300f283c6e3ac33b9068f1ee41104b552ce
Reporting entity
- Name
- MAXCO SUPPLY, INC.norm: maxco supply
Victim entity
- Name
- MAXCO SUPPLY, INC.norm: maxco supply
Incident
- Discovered
- Dec 8, 2023
- Materiality determined
- —
- Notification sent
- Dec 28, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unknown
- Regulator citations
- Notified the FBI, and the appropriate state authorities of this incident
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- Leak >30dCA 60-day OK · 20d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 8, 2023→ Notified: Dec 28, 202320d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.