MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSHEALTH_BASICPHIMediumContained
Ray Catena Motor Car
bd_5035e022f5599130 · schema v1 · pii pii-v1
Full breach record for Ray Catena Motor Car →Ray Catena Motor Car Corp. notified Maryland AG of a ransomware incident affecting 16 Maryland residents. An unknown actor gained access between Nov 5-17, 2023, encrypting files and exfiltrating data including SSNs, driver's licenses, financial accounts, credentials, and PHI. Notification sent March 18, 2025. Credit monitoring offered.
Maryland clock✗ MD AG >90d16 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0cdcf89b349daf04Vermont State AGfiled 2025-03-18Verified
- bd_edeab0d9429d4a6bNew Hampshire State AGfiled 2025-07-30(134d gap)Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376563.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2025
- Raw hash
- eb4183c1d3c827c27389d67bf1f00791b7a205c231209de639389e1c9976efff
Reporting entity
- Name
- Ray Catena Motor Carnorm: ray catena motor car
Victim entity
- Name
- Ray Catena Motor Carnorm: ray catena motor car
Incident
- Discovered
- Nov 17, 2023
- Materiality determined
- Jun 10, 2024
- Notification sent
- Mar 18, 2025
- Affected individuals
- 16
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSHEALTH_BASICPHI
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementProviding written notice of this incident to relevant state regulatorsProviding notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Compliance
- Time to disclose
- 16 months(487 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.