HackingManufacturingManufacturingCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
J.S. McCarthy Co., Inc.
bd_7ce0451e8c8564f8 · schema v1 · pii pii-v1
Full breach record for J.S. McCarthy Co., Inc. →J.S. McCarthy Co., Inc., a printing/packaging company in Augusta, ME, experienced a network disruption on October 20, 2024. An investigation concluded October 31, 2024 determined that certain files may have been acquired without authorization, potentially exposing names and Social Security numbers. 440 Maine residents and 618 individuals total were affected. Notifications were sent November 8, 2024 with 12 months of credit monitoring via TransUnion/Cyberscout.
Maine clockDiscovered Oct 31, 2024 → Filed with AG Nov 8, 20248d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed440 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f4be2551-abed-45f8-b10c-21bb517363a7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 8, 2024
- Raw hash
- 82c9c685d461984f33c47a17beee87f3e8fec5db446948c154d0de95057b7894
Reporting entity
- Name
- J.S. McCarthy Co., Inc.norm: js mccarthy
Victim entity
- Name
- J.S. McCarthy Co., Inc.norm: js mccarthy
- Industry
- Manufacturingllm
Incident
- Discovered
- Oct 31, 2024
- Materiality determined
- —
- Notification sent
- Nov 8, 2024
- Affected individuals
- 440
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notification filed with Maine Attorney General
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 31, 2024→ Filed with AG: Nov 8, 20248d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.