MalwareTechnologyTelecom & MediaInformationRansomwareRansom DemandedTargetedPIIIdentity (basic)Government IDEmploymentMediumContained

IES Communications, LLC

bd_58755e0e7da232bd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 17, 2025

Filed

Jul 7, 2025

To disclose

16 weeks

Affected

538state residents only

Linked

6 filings

Confidence

67%

Full breach record for IES Communications, LLC →

IES Communications, LLC notified Iowa AG of a cybersecurity incident discovered March 17, 2025. A threat actor attempted to deploy ransomware. Unauthorized access to employee PII (names, DOB, SSN, payroll) was confirmed June 6, 2025. 538 Iowa residents affected. Notices sent July 3, 2025. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday16 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 16 weeks / 112 days

Mar 17, 2025

Discovered

Jul 7, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitechaosbd_e9ea70f547d888152025-02-19 · +138dCandidate

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_d8af18dfb6f019d02025-07-07Verified
Texas State AGbd_85bb73a13ad462562025-07-08 · +1dVerified
Indiana State AGbd_bdbee350fcef93d72025-07-03 · +4dVerified
Nebraska State AGbd_e1b82d489a4cc2162025-07-03 · +4dVerified

Name: IES Communications, LLC
norm: ies communications
Domain: iescomm.com

Name: IES Communications, LLC
norm: ies communications
Domain: iescomm.com
Industry: TechnologyllmTelecom & Mediallm

Discovered: Mar 17, 2025
Materiality determined: —
Notification sent: Jul 3, 2025
Affected individuals: 538state-resident count only
Data types: PIIIdentity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified Iowa Attorney General
Initial access: exploit_public_facing

During the incident: Engaged cybersecurity experts who provided guidance through the occurrence
Notified law enforcement
Retained legal counsel to ensure that response and remediation comply with all federal, state and local laws and regulations
Identified and eliminated the threat
Took action to limit potential exposure of its systems and data
Mobilized a response team
Changes made: Updating internal security practices
Hardening technology systems against further breach
Offering complimentary access to Experian IdentityWorks for 24 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJul 3 · first

Nebraska State AGJul 3 · first

Maine State AG+4d

Iowa State AG+4d · this page

Texas State AG+5d

Pattern: first filing Jul 3 (IN), last Jul 8 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/772025_IES_Communications_LLC_13371D6A09901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 7, 2025
Raw hash: d653ab4124ba075085e42bc8395c9503e6460b3d7e729a7bf9387c930ef9ba02

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityIES Communications, LLC

Victim entityIES Communications, LLC

Incidentdiscovered Mar 17, 2025

Stated responseEngaged cybersecurity experts who provided guidance through the occurrence

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov