MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountMediumContained

ALTMAN SPECIALTY PLANTS, LLC

bd_3405e982834529f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 11, 2023

Filed

Sep 13, 2024

To disclose

12 months

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for ALTMAN SPECIALTY PLANTS, LLC →

Altman Specialty Plants, LLC reported a ransomware incident affecting 2 Maine residents. Unauthorized access occurred on September 11, 2023, involving name, SSN, and financial account data. Notices were sent on September 13, 2024, with credit monitoring offered.

J jump to incidentP pin to compareR raw source

Maine clockScope identified Jul 2, 2024 → Filed with AG Sep 13, 202473d ⏱ ME AG >30d12 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 12 months / 368 days

Sep 11, 2023

Begins

Sep 11, 2023

Discovered

Sep 13, 2024

Filed

vs. sector median

+43 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_1997554f080188822024-09-13Verified
Indiana State AGbd_a60a8086d244a6892024-09-13Verified
Massachusetts State AGbd_b85a44bb949c91322024-09-13Verified
Montana State AGbd_e50fd324390aa0792024-09-13Verified by operator

Name: ALTMAN SPECIALTY PLANTS, LLC
norm: altman specialty plants
Domain: altmanplants.com

Name: ALTMAN SPECIALTY PLANTS, LLC
norm: altman specialty plants
Domain: altmanplants.com
Industry: Retail & Consumerllm

Discovered: Sep 11, 2023
Scope identified: Jul 2, 2024Maine’s notice clock starts here (10 M.R.S. §1348(1))The letter says: “This process completed on July 2, 2024.”
Breach occurred: Sep 11, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 13, 2024
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: providing written notice of this incident to relevant state regulators

During the incident: Launched an investigation to determine the nature and scope of the activity
Conducted a comprehensive and time-intensive review of the contents of the files
Providing access to credit monitoring services
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators
Providing written notice of this incident to the three major credit reporting agencies
Changes made: Implement additional safeguards and training to its employees
Strengthened its administrative, physical and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 months(368 days from discovery to filing)
Compliance flags: ME AG >30d · 73d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Scope identified: Jul 2, 2024
→ Filed with AG: Sep 13, 2024
73d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Scope identified: Jul 2, 2024 → Filed with AG: Sep 13, 2024	73d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGSep 13 · first

Indiana State AGSep 13 · first

Massachusetts State AGSep 13 · first

Montana State AGSep 13 · first

Maine State AGSep 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7608529b-d724-46f0-beca-0095cb28320e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 13, 2024
Raw hash: 0c07cc562f8f4b8e328e4c3c9c2ca14d0c9e2c33c90887681508e488f64e9353

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityALTMAN SPECIALTY PLANTS, LLC

Victim entityALTMAN SPECIALTY PLANTS, LLC

Incidentdiscovered Sep 11, 2023

Stated responseLaunched an investigation to determine the nature and scope of the activity

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov