HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedCredentialsIdentity (basic)LowContained

Tokyo Electron U.S. Holdings

bd_5a867245243b9acf · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 19, 2025

Filed

Mar 20, 2025

To disclose

29 days

Affected

3state residents only

Linked

3 filings

Confidence

67%

Full breach record for Tokyo Electron U.S. Holdings →

Tokyo Electron U.S. Holdings, Inc. notified the Maryland AG that on Feb 19, 2025, it detected suspicious activity leading to unauthorized access by a third party. The attacker obtained copies of files containing User IDs, passwords, and business contact info (email, phone) from Outlook. 3 Maryland residents were affected. TEL U.S. reset passwords and enhanced safeguards. No identity theft or fraud was indicated.

J jump to incidentP pin to compareR raw source

Maryland clock✓ MD AG ≤30d29 days discovery → filing

Incident timeline

discovery → filing · 29 days

Feb 19, 2025

Discovered

Mar 20, 2025

Filed

vs. sector median

14 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_0938996c667d57062025-03-21 · +1dVerified
Oregon State AGbd_dd1f610d532c26942025-04-03 · +14dVerified

Name: Tokyo Electron U.S. Holdings
norm: tokyo electron us
Domain: us.tel.com

Name: Tokyo Electron U.S. Holdings
norm: tokyo electron us
Domain: us.tel.com
Industry: Technologyllm

Discovered: Feb 19, 2025
Materiality determined: —
Notification sent: Mar 21, 2025
Affected individuals: 3state-resident count only
Data types: CredentialsIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Maryland Office of the Attorney General
Initial access: valid_credentials

During the incident: Instituted mitigation measures to minimize and contain any disruption to its operations
Launched an investigation into the nature and scope of the incident and affected data
Implemented additional and enhanced safeguards to enhance the security of its network, systems, and data
Password resets for all accounts
Changes made: Implemented additional and enhanced safeguards to enhance the security of its network, systems, and data
Password resets for all accounts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: MD AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maryland State AGMar 20 · first · this page

Vermont State AG+1d

Oregon State AG+14d

Pattern: first filing Mar 20 (MD), last Apr 3 (OR) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376720.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2025
Raw hash: 7ad221d6eff5c42b87d37d2e3d0be8af17ffda4c8f2737e52fa129f1956eaf10

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTokyo Electron U.S. Holdings

Victim entityTokyo Electron U.S. Holdings

Incidentdiscovered Feb 19, 2025

Stated responseInstituted mitigation measures to minimize and contain any disruption to its operations

ComplianceMD AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov