Michael & Son
bd_8bd4728d40a59ada · schema v1 · pii pii-v1
Full breach record for Michael & Son →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Black Basta on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Since 2010, the Michael & Son CARES project has been giving back to the same communities that have embraced our family-owned company from the beginning. Moreover, Michael & Son has donated over $500,000 worth of complimentary work in the last 12 years. Ultimately, the goal of the Michael & Son Cares Project is to restore comfort back to families when they need it most.Michael & Son’s commitment to the fantastic community that has embraced us from the beginning is not only a choice but a duty. With success comes responsibility and Michael & Son Cares wholeheartedly embraces the task at hand.I’ve experienced my fair share of financial struggles throughout my life, but through hard work and determination I now run one of the largest Plumbing, Electrical, and HVAC companies in the nation.Every day my technicians come across some incredible people with heartbreaking stories. When they find they have nowhere else to turn, that’s when we come in to lend a helping hand to provide comfort for a community member in need.SITE: https://michaelandson.com Address 5740 General WashingtonDr Alexandria, VA 22312
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Mar 8, 2023
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Montana State AGbd_2a739d103bed5e642023-02-14 · +22dCandidate
- New Hampshire State AGbd_9fdb6c064a9f09032023-02-14 · +22dVerified
Filing propagation · 3 filings · 2 states
View merged incident ↗Pattern: first filing Feb 14 (MT), last Mar 8 — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.