MalwareConstructionConstructionRansomwarePlay GroupPlayData EncryptedData ExfiltratedData PublishedRansom DemandedCustomer Data InvolvedActor NamedIdentity (basic)Government IDHealth (basic)Financial accountPHIMediumContained

Mainelli Mechanical Contractors

bd_6351e1a7751f5dbd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 19, 2025

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

68%

Full breach record for Mainelli Mechanical Contractors →

Mainelli Mechanical Contractors, Inc. experienced a ransomware attack by the 'Play Group' on October 17, 2024. The attacker encrypted files and allegedly exfiltrated and published personal information including names, SSNs, driver's license numbers, medical information, and financial account details. One Maryland resident was affected. The company blocked unauthorized access, engaged forensic experts, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Oct 17, 2024

Begins

Feb 19, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_b13d9e0909e9bb912024-10-18 · +124dVerified

Regulatory filings (1) · sorted by filing gap

Montana State AGPlay Groupbd_586c2060c7bd62ab2025-02-19Candidate

Name: Mainelli Mechanical Contractors
norm: mainelli mechanical contractors
Domain: mainellimechanical.com

Name: Mainelli Mechanical Contractors
norm: mainelli mechanical contractors
Domain: mainellimechanical.com
Industry: Constructionllm

Discovered: —
Breach occurred: Oct 17, 2024
Materiality determined: —
Notification sent: Feb 19, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial accountPHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware· Play Group
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1190 Exploit Public-Facing Application
Threat actor: Play GroupExternalFinancial
Regulator citations: Notified Office of the Maryland Attorney General

During the incident: Took steps to block any unauthorized access to its network
Launched an investigation with the support of leading outside cybersecurity experts
Conducting a thorough review of the potentially affected systems
Implemented additional security measures designed to prevent a recurrence of such an attack
Offering one year of complimentary credit monitoring and identity restoration services through Experian
Changes made: Implemented additional security measures designed to prevent a recurrence of such an attack
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGFeb 19 · first

Maryland State AGFeb 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376379.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 19, 2025
Raw hash: a6a11c08127fa9a1a8fc49f9a5c3eaedaf0147f31b4c828d89a70859a62aff7e

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityMainelli Mechanical Contractors

Victim entityMainelli Mechanical Contractors

IncidentRansomware

Stated responseTook steps to block any unauthorized access to its network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov