HackingEmployee Data InvolvedData ExfiltratedMulti-Stage ChainDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTAUTHENTICATIONMediumContained
ADD Systems
bd_5048cd57a2a48748 · schema v1 · pii pii-v1
Full breach record for ADD Systems →ADD Systems (Flanders, NJ) reported two network disruption incidents occurring on March 21, 2024 and May 14, 2024, discovered on May 31, 2024 after forensic investigation. An unauthorized third party may have accessed current and former employee personal information including names, Social Security numbers, driver's license numbers, bank account information, and I-9 identification data. 332 individuals were affected total; 3 were Maine residents. Kroll identity monitoring was offered at no cost.
Maine clockDiscovered May 31, 2024 → Filed with AG Jul 19, 202449d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_13eb6c52f3585c30New Hampshire State AGfiled 2024-07-19Verified
- bd_6a95753b81398d11Indiana State AGfiled 2024-07-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f99de046-00b1-47d2-b044-f8fc53e07f3e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2024
- Raw hash
- f405d6f43807867793e60ce59d1263f4899420e4d4f784393a8bdf704bee397b
Reporting entity
- Name
- ADD Systemsnorm: add systems
- Industry
- Other Commercial
Victim entity
- Name
- ADD Systemsnorm: add systems
- Industry
- Other Commercial
Incident
- Discovered
- May 31, 2024
- Materiality determined
- —
- Notification sent
- Jul 19, 2024
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTAUTHENTICATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 31, 2024→ Filed with AG: Jul 19, 202449d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.