HackingGovernment IDIdentity (basic)MediumContained

McMillan Electric Company

bd_411c047803f89f75 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Oct 29, 2024

Filed

Feb 13, 2025

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

67%

Full breach record for McMillan Electric Company →

McMillan Electric Company notified Nebraska residents that an unauthorized actor accessed its network on or about October 29, 2024. The breach exposed full names and Social Security numbers. The company contained the threat, engaged external cybersecurity professionals, and offered complimentary identity theft protection services. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

Oct 29, 2024

Discovered

Feb 13, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 99 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_dc7542d78b4b540b2024-11-05 · +100dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_b43d9ac1e73e98d42025-02-13Verified
Massachusetts State AGbd_1a1bae5ba27c4de52025-02-14 · +1dVerified
Maine State AGbd_d2e0415a5648f7b62025-02-14 · +1dVerified

Name: McMillan Electric Company
norm: mcmillan electric
Domain: mcmillanco.com

Name: McMillan Electric Company
norm: mcmillan electric
Domain: mcmillanco.com

Discovered: Oct 29, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Contained and secured the threat
Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals
Offering a complimentary month membership of identity theft protection services through Identity Defense
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGFeb 13 · first

Nebraska State AGFeb 13 · first · this page

Massachusetts State AG+1d

Maine State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/McMillan_Redacted_Notice_Letter_35721753v1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 13, 2025
Raw hash: 5b3d5874950528cabc8a7affdfdc4483586a00ba28343f26fec4b1caeb002f06

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityMcMillan Electric Company

Victim entityMcMillan Electric Company

Incidentdiscovered Oct 29, 2024

Stated responseContained and secured the threat

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov