HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

ELASTEC SL

bd_58725253f7d15c83 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 30, 2024

Filed

Oct 31, 2024

To disclose

4 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for ELASTEC SL →

Elastec, Inc. reported unauthorized access to an employee email account between June 4 and June 18, 2024. The breach was discovered on September 30, 2024. One Maine resident's name and Social Security number were compromised. Notification was sent on October 31, 2024, including 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 30, 2024 → Filed with AG Oct 31, 202431d ⏱ ME AG >30d4 weeks discovery → filing

Incident timeline

undetected · 118 days

discovery → filing · 4 weeks / 31 days

Jun 4, 2024

Begins

Sep 30, 2024

Discovered

Oct 31, 2024

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_fc4c79371ace51922024-10-31Verified

Name: ELASTEC SL
norm: elastec sl
Domain: elastec.com

Name: ELASTEC SL
norm: elastec sl
Domain: elastec.com
Industry: Manufacturingllm

Discovered: Sep 30, 2024
Breach occurred: Jun 4, 2024 – Jun 18, 2024
Undetected for: 118 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 31, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Providing written notice of this incident to relevant state regulators
Initial access: valid_credentials

During the incident: Took steps to secure its email environment
Conducted a comprehensive investigation
Worked with third-party data review specialists
Notified potentially affected individuals
Provided guidance on how to better protect against identity theft and fraud
Providing access to credit monitoring services for twelve (12) months through Experian
Providing written notice of this incident to relevant state regulators
Providing written notice to the three major credit reporting agencies
Changes made: Continue to evaluate and enhance its safeguards as appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: ME AG >30d · 31d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 30, 2024
→ Filed with AG: Oct 31, 2024
31d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 30, 2024 → Filed with AG: Oct 31, 2024	31d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGOct 31 · first

Maine State AGOct 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/916e70f1-5db2-4bc8-8b66-481f1862e764.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 31, 2024
Raw hash: d7b5f51df1869b8c0470b79d7f8ee03f4f16d398b63fcdb1b64fff0836f9b7a5

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityELASTEC SL

Victim entityELASTEC SL

Incidentdiscovered Sep 30, 2024

Stated responseTook steps to secure its email environment

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov