HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Chemical & Industrial Engineering Inc.

bd_340152f4cfb586d8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2025

Filed

Apr 5, 2026

To disclose

35 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Chemical & Industrial Engineering Inc. →

Chemical & Industrial Engineering, Inc. disclosed a data breach where an unauthorized third party accessed its network from June to August 2025. The incident compromised personal information including names, addresses, and government IDs (SSNs). The company engaged forensic experts, notified law enforcement, and offered credit monitoring services. The exact number of affected individuals was not disclosed in the filing.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday35 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 61 days

discovery → filing · 35 weeks / 247 days

Jun 1, 2025

Begins

Aug 1, 2025

Discovered

Apr 5, 2026

Filed

vs. sector median

+17 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_a99dfdb5ee1674b32026-04-05Candidate
Indiana State AGbd_4d1115d2f4337bb82026-04-07 · +2dVerified by operator
Nebraska State AGbd_7d7f738389f5518b2026-04-07 · +2dVerified
New Hampshire State AGbd_6e9c261ccfd4f82a2026-04-13 · +8dVerified

Show 1 more filing ↓up to 11d gap

Massachusetts State AGbd_11fbd9e5c4581e952026-04-16 · +11dVerified

Name: Chemical & Industrial Engineering Inc.
norm: chemical industrial engineering

Name: Chemical & Industrial Engineering Inc.
norm: chemical industrial engineering
Industry: Technologyllm

Discovered: Aug 1, 2025
Breach occurred: Jun 1, 2025 – Aug 31, 2025
Undetected for: 61 daysoccurrence → discovery
Materiality determined: Apr 5, 2026
Notification sent: Apr 5, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: exploit_public_facing

During the incident: Worked with third-party cybersecurity experts to investigate and remediate
Engaged a data-review firm to analyze files' contents
Notified law enforcement
Offered complimentary membership to Financial Shield, a credit and identity-theft monitoring service
Changes made: Further secured systems to protect information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(247 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGApr 5 · first

Vermont State AGApr 5 · first · this page

Indiana State AG+2d

Nebraska State AG+2d

New Hampshire State AG+8d

Massachusetts State AG+11d

Pattern: first filing Apr 5 (ME), last Apr 16 (MA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-04-05-chemical-industrial-engineering-inc-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 5, 2026
Raw hash: 39334ec313f69466c8d73c51372670923710c8260b92d1819bb60d4c67b9f23a

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityChemical & Industrial Engineering Inc.

Victim entityChemical & Industrial Engineering Inc.

Incidentdiscovered Aug 1, 2025

Stated responseWorked with third-party cybersecurity experts to investigate and remediate

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov