MalwareManufacturingTransportation & LogisticsManufacturingRansomwareStolen CredentialsData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

STEEL WAREHOUSE COMPANY LLC

bd_3bc3002511614bea · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 23, 2025

Filed

Apr 30, 2026

To disclose

15 months

Affected

5state residents only

Linked

7 records

Confidence

64%

Full breach record for STEEL WAREHOUSE COMPANY LLC →

Steel Warehouse Company LLC notified individuals of a data breach occurring on January 23, 2025. An employee accepted a Microsoft Teams call from an external actor and mistakenly granted remote access, allowing the actor to deploy malicious software. Affected data may include names, addresses, SSNs, passport numbers, driver's license numbers, dates of birth, and bank account numbers. The company is offering 12 months of identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d15 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 15 months / 462 days

Jan 23, 2025

Begins

Jan 23, 2025

Discovered

Apr 30, 2026

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by cactus about this victim was first seen 430 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecactusbd_4a87e566495f86df2025-02-06 · +448dVerified by operator

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_de2712b90dea14442026-04-30Verified by operator
Texas State AGbd_7a439add4d0e01c82026-05-01 · +1dVerified by operator
Texas State AGbd_7ccc25d018b4b6c12026-05-28 · +28dVerified by operator
Nebraska State AGbd_7212e9d5181de2372026-03-24 · +37dVerified by operator

Show 1 more filing ↓up to 447d gap

Indiana State AGbd_37ca52c9a8006bd42025-02-07 · +447dVerified by operator

Name: STEEL WAREHOUSE COMPANY LLC
norm: steel warehouse
Domain: steelwarehouse.com

Name: STEEL WAREHOUSE COMPANY LLC
norm: steel warehouse
Domain: steelwarehouse.com
Industry: ManufacturingllmTransportation & Logisticsllm

Discovered: Jan 23, 2025
Breach occurred: Jan 23, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 17, 2026
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1486 Data Encrypted for Impact
Threat actor: External
Initial access: phishing_link

During the incident: Offering identity theft protection services through IDX
Providing 12 months of credit and CyberScan monitoring
Providing a $1,000,000 insurance reimbursement policy
Providing fully managed ID theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(462 days from discovery to filing)
Compliance flags: MA AG >90dLeak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGFeb 7 · first

Nebraska State AG+410d

Vermont State AG+447d

Massachusetts State AG+447d · this page

Texas State AG+448d

Texas State AG+475d

Pattern: first filing Feb 7 (IN), last May 28 (TX) — a 475-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-674-steel-warehouse-company-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 30, 2026
Raw hash: 57b3744ef8738e98e7fe8c42711d8dc036398ca9f16e7a86e4de889ff3c052e6

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entitySTEEL WAREHOUSE COMPANY LLC

Victim entitySTEEL WAREHOUSE COMPANY LLC

Incidentdiscovered Jan 23, 2025

Stated responseOffering identity theft protection services through IDX

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov