HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumContained
Douglas
bd_846887f4edd4ebae · schema v1 · pii pii-v1
Full breach record for Douglas →Douglas Electric & Lighting, Inc. notified the Maryland Attorney General of a security incident affecting 147 Maryland residents. Between October 25-26, 2024, an unauthorized actor accessed the company's network and exfiltrated files containing names, SSNs, driver's license numbers, financial account numbers, passport numbers, and health information. The company secured its network, reported the incident to law enforcement, and offered one year of credit monitoring to affected individuals.
Maryland clock✗ MD AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed147 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376376.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 19, 2025
- Raw hash
- 6e807868ae5b39cf04bc0ff72ec8e1d353087b35995bc5b15d7da06a2869428b
Reporting entity
- Name
- Douglasnorm: douglas
- Domain
- douglasus.com
Victim entity
- Name
- Douglasnorm: douglas
- Domain
- douglasus.com
Incident
- Discovered
- Oct 26, 2024
- Materiality determined
- —
- Notification sent
- Feb 19, 2025
- Affected individuals
- 147
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.