HackingRetail & ConsumerRetailCustomer Data InvolvedGovernment IDFinancial accountMediumContained

Maki Building Centers

bd_540b5eecb2679897 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 15, 2025

Filed

Mar 4, 2026

To disclose

20 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for Maki Building Centers →

MAKI Building Centers, Inc. discovered unauthorized activity on its computer systems on the night of October 15 into the early morning of October 16, 2025. The incident may have exposed personal information of certain Massachusetts customer residents, including Social Security numbers and banking details. The company secured its systems, engaged an outside IT service company for remediation and monitoring, changed passwords, and installed new antivirus software. Identity monitoring services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d20 weeks discovery → filing

Incident timeline

discovery → filing · 20 weeks / 140 days

Oct 15, 2025

Discovered

Mar 4, 2026

Filed

vs. sector median

+12 wks slower

This filing is one of 2 about the same incident.View merged incident

A leak claim by interlock about this victim predates this filing by 127 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinterlockbd_bbc20551817032fd2025-10-27 · +127dCandidate

Name: Maki Building Centers
norm: maki building centers
Domain: makicorp.com

Name: Maki Building Centers
norm: maki building centers
Domain: makicorp.com
Industry: Retail & Consumerllm

Discovered: Oct 15, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDFinancial account
Attack vector: Unknown
Threat actor: External

During the incident: Took action to secure our systems
Began an investigation to understand the nature and scope of the incident
Working with a credible IT Service Company to address and remediate the issue
Changing all server passwords and individual user passwords
Hiring an outside IT company to manage and monitor our network for any suspicious activity
Installing new antivirus software on all company computers
Changes made: Strengthened security to help prevent a similar issue from happening again
Continuing to enhance our safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: MA AG >90dLeak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-323-maki-building-centers-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2026
Raw hash: 2930467b79a4dc10cfe35d71d866c57e0a87bb7396afb7fcd34d5a244cc6722b

Linked disclosures

Ransomware claims (1)

Reporting entityMaki Building Centers

Victim entityMaki Building Centers

Incidentdiscovered Oct 15, 2025

Stated responseTook action to secure our systems

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov