HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Brox Industries, Inc.
bd_215348d0a7413781 · schema v1 · pii pii-v1
Full breach record for Brox Industries, Inc. →Brox Industries, Inc. (Andover, MA) detected unauthorized access to its network on March 11, 2025. A forensic investigation determined that an unauthorized actor may have accessed and/or acquired files containing personal information between February 28, 2025 and March 11, 2025. Discovery of the data exposure was confirmed on October 3, 2025. 22 Maine residents were affected. Kroll identity monitoring (12 months) was offered to affected individuals.
Maine clockDiscovered Oct 3, 2025 → Filed with AG Oct 20, 202517d ✓ ME AG ≤30d17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3244e030cb2c1798Indiana State AGfiled 2025-10-20Verified
- bd_a790ce2e143f1ec4New Hampshire State AGfiled 2025-10-24(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1c2364ad-b116-4550-bbfa-30af19e99d27.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 20, 2025
- Raw hash
- 277033b4d46ffc438f4f7e8573c1e35fb79023ce2a689219f2de30e08d9877dc
Reporting entity
- Name
- Brox Industries, Inc.norm: brox industries
- Industry
- Other Commercial
Victim entity
- Name
- Brox Industries, Inc.norm: brox industries
- Industry
- Other Commercial
Incident
- Discovered
- Oct 3, 2025
- Materiality determined
- Oct 3, 2025
- Notification sent
- Oct 20, 2025
- Affected individuals
- 22
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 3, 2025→ Filed with AG: Oct 20, 202517d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.