HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Sterling

bd_66fcd1c1596f99d0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 18, 2024

Filed

Oct 8, 2024

To disclose

12 weeks

Affected

168state residents only

Linked

3 filings

Confidence

66%

Full breach record for Sterling →2 incidents on file

Sterling Corporation, an electronics assembly manufacturer, notified the NH AG of a data security incident. Suspicious activity was detected on July 18, 2024, leading to the discovery that unauthorized access may have compromised PII of current and former employees. 168 NH residents were affected. Notifications were sent on October 7, 2024, offering identity protection services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d12 weeks discovery → filing

Incident timeline

discovery → filing · 12 weeks / 82 days

Jul 18, 2024

Discovered

Sep 12, 2024

Scope determined

Oct 8, 2024

Filed

vs. sector median

+1 wks slower

This filing is one of 3 about the same incident.View merged incident

A leak claim by black_basta about this victim predates this filing by 659 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_618d97f7848957d32024-10-08Candidate
Massachusetts State AGbd_ca57a408ddf6bd192024-10-08Verified

Name: Sterling
norm: sterling
Domain: sterling.com

Name: Sterling
norm: sterling
Domain: sterling.com
Industry: Manufacturingllm

Discovered: Jul 18, 2024
Materiality determined: Sep 12, 2024
Notification sent: Oct 7, 2024
Affected individuals: 168state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took systems offline
Engaged cybersecurity to secure its network and investigate
Terminated the unauthorized access on its network
Began an investigation into what happened
Sent notice to the potentially affected individuals
Offering free identity protection services
Changes made: Examining its cyber environment in order to consider what steps might prevent a similar incident from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(82 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 8 · first

Massachusetts State AGOct 8 · first

New Hampshire State AGOct 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sterling-20241008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 8, 2024
Raw hash: a44fcfb79d6de76cdc78c6b979417f80e9ffccfd5b9a5b7505db1e55cf1837de

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySterling

Victim entitySterling

Incidentdiscovered Jul 18, 2024

Stated responseTook systems offline

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov