HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Worthen Industries
bd_273abf94e0302acb · schema v1 · pii pii-v1
Full breach record for Worthen Industries →Worthen Industries, Inc. reported an external system breach (hacking) occurring between December 24, 2023, and January 14, 2024, discovered on March 15, 2024. The incident affected 1,277 individuals, including 2 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification on April 10, 2024, and offered 12 months of credit and identity protection services through IDX.
Maine clockDiscovered Mar 15, 2024 → Filed with AG Apr 29, 202445d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 99 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_b5b054bc9a1e3e9fLeak Site8basefiled 2024-01-24(96d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_6cc0290a8ea3c922New Hampshire State AGfiled 2024-04-29Verified
- bd_de0797cdb1393f92Vermont State AGfiled 2024-04-10(19d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1d5f906d-0f70-4127-b797-c875121bc056.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 29, 2024
- Raw hash
- a202aed0ad942bef630a048ba26bd633a1638d55905ec4a73299ecb258b68f4c
Reporting entity
- Name
- Worthen Industriesnorm: worthen industries
- Domain
- worthenind.com
Victim entity
- Name
- Worthen Industriesnorm: worthen industries
- Domain
- worthenind.com
Incident
- Discovered
- Mar 15, 2024
- Materiality determined
- —
- Notification sent
- Apr 10, 2024
- Affected individuals
- 1,277
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- ME AG >30d · 45dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 15, 2024→ Filed with AG: Apr 29, 202445d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.