MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedIdentity (basic)Government IDFinancial accountHealth (basic)PIIMediumContained

ASARCO LLC

bd_49cfe1f19d35c454 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2021

Filed

Jul 16, 2021

To disclose

20 weeks

Affected

576state residents only

Linked

7 filings

Confidence

66%

Full breach record for ASARCO LLC →

Asarco LLC notified Montana of a March 1, 2021 ransomware incident where a malicious third party encrypted servers in the US and Mexico. On May 3, 2021, unauthorized public data release was discovered. Compromised data included names, SSNs, driver's licenses, financial account info, and medical/insurance data. Asarco isolated systems, engaged forensic experts, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Mar 1, 2021

Begins

Mar 1, 2021

Discovered

Jul 16, 2021

Filed

vs. sector median

+9 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_141271ebdf6d56532021-07-16Verified
New Hampshire State AGbd_16581bbcb4448d992021-07-16Verified
Massachusetts State AGbd_adc3afb1fcab8e332021-07-16Verified
Indiana State AGbd_d6cc1dff8d7fe90c2021-07-16Verified

Show 2 more filings ↓up to 169d gap

Washington State AGbd_cf61ab0eed5238b52021-06-02 · +44dCandidate
Illinois State AGbd_565d7d5115d918122022-01-01 · +169dVerified

Name: ASARCO LLC
norm: asarco

Name: ASARCO LLC
norm: asarco
Industry: Manufacturingllm

Discovered: Mar 1, 2021
Breach occurred: Mar 1, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 576state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Disconnected its servers
Deactivated the access point used to deploy the malicious program
Isolated the Data Center
Working with a leading cybersecurity firm that is analyzing the malware used in the attack
Monitoring the dark web to identify any additional data that might have been compromised
Making enhancements to internal security systems
Implementing additional procedures to mitigate future risk
Arranged to have NortonLifeLock to protect your identity and monitor your credit for 12 months at no cost
Changes made: Making enhancements to internal security systems
Implementing additional procedures to mitigate future risk
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGJun 2 · first

Maine State AG+44d

New Hampshire State AG+44d

Massachusetts State AG+44d

Indiana State AG+44d

Montana State AG+44d · this page

Illinois State AG+213d

Pattern: first filing Jun 2 (WA), last Jan 1 (IL) — a 213-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-96.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2021
Raw hash: e9e866a67cb2e7c18f457194b20b1c37665d7101a8bc9074523539e699905637

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityASARCO LLC

Victim entityASARCO LLC

Incidentdiscovered Mar 1, 2021

Stated responseDisconnected its servers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov