MalwareRetail & ConsumerRetailRansomwareRansom DemandedData ExfiltratedIdentity (basic)Government IDHighContained

Phil Smith Management, Inc.

bd_30dee3ff79df90bb · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 1, 2025

Filed

Jul 31, 2025

To disclose

26 weeks

Affected · nationwide

12,2746 in this filing

Linked

6 filings

Confidence

65%

Full breach record for Phil Smith Management, Inc. →

Phil Smith Automotive Group experienced a ransomware attack in early February 2025, resulting in unauthorized access to personal information including names, SSNs, and driver's licenses. 12,274 individuals were affected, including 6 Maine residents. The company notified the FBI, engaged forensic specialists, and provided 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 1, 2025 → Filed with AG Jul 31, 2025180d ✗ ME AG >90d26 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 26 weeks / 180 days

Feb 1, 2025

Begins

Feb 1, 2025

Discovered

Jul 31, 2025

Filed

vs. sector median

+18 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by dragonforce about this victim predates this filing by 173 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedragonforcebd_5d9115e8cfa0a33c2025-03-29 · +124dVerified by operator
Leak Sitedragonforcebd_6432d7de6f4e8ec32025-02-08 · +173dVerified by operator

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_429e89d3c30c21cc2025-07-31Verified
Massachusetts State AGbd_68fa836388ef45bb2025-07-31Verified
Indiana State AGbd_fb43a564bb05bb3e2025-07-31Verified

Name: Phil Smith Management, Inc.
norm: phil smith management
Domain: philsmithauto.com

Name: Phil Smith Management, Inc.
norm: phil smith management
Domain: philsmithauto.com
Also named: Phil Smith Management, Inc.dba oflegal entity
Phil Smith Automotive Groupdba oftrade name
Industry: Retail & Consumerllm

Discovered: Feb 1, 2025
Breach occurred: Feb 1, 2025 – Feb 28, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 31, 2025
Affected individuals: 12,274state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified U.S. federal law enforcement, including the Federal Bureau of Investigation (“FBI”)

During the incident: Took protective actions to stop the unauthorized access
Notified U.S. federal law enforcement, including the Federal Bureau of Investigation (“FBI”)
Assessed the security of our network and systems
Launched an investigation with the assistance of leading cybersecurity specialists
Installed monitoring devices on our IT systems to detect suspicious activity
Changes made: Working to implement additional safeguards
Providing the potentially affected individuals two (2) years of complimentary credit protection and monitoring services through Cyberscout at no cost to the individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(180 days from discovery to filing)
Compliance flags: ME AG >90d · 180dME resident >60d · 180dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 1, 2025
→ Filed with AG: Jul 31, 2025
180d 90 days ME AG >90d
Maine
Discovered: Feb 1, 2025
→ Notified: Jul 31, 2025
180d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 1, 2025 → Filed with AG: Jul 31, 2025	180d	90 days	ME AG >90d
Maine	Discovered: Feb 1, 2025 → Notified: Jul 31, 2025	180d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGJul 31 · first

Massachusetts State AGJul 31 · first

Indiana State AGJul 31 · first

Maine State AGJul 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1a05044e-dd7f-4bd0-ac1e-110418195305.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2025
Raw hash: af22b68e63afa294bc516f418e6d6b1b90e9218b9cb0d459e4169214a5865acd

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityPhil Smith Management, Inc.

Victim entityPhil Smith Management, Inc.

Incidentdiscovered Feb 1, 2025

Stated responseTook protective actions to stop the unauthorized access

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov