HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Smart ERP Solutions
bd_9622e391e544b65b · schema v1 · pii pii-v1
Full breach record for Smart ERP Solutions →Smart ERP Solutions, Inc. notified the Maryland AG of a network security incident occurring July 3-13, 2024. Unauthorized access to personal information (names and SSNs) of 1,000 Maryland residents associated with clients McLane Co., Inc. and United Airlines was confirmed on Jan 10, 2025. No evidence of exfiltration or fraud. Smart ERP engaged forensic investigators and offered 12 months of credit monitoring.
Leak gap clock✗ Leak >180d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 241 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_db80fa8a4d71251bCalifornia State AGfiled 2025-03-11Candidate
- bd_e1b0bab6229b5bd0Vermont State AGfiled 2025-03-11Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376533.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2025
- Raw hash
- d70a883725c59f94f218a769f1418dc93862fd3b3d92415708a3677859b87c77
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Smart ERP Solutionsnorm: smart erp solutions
- Domain
- smarterp.com
Incident
- Discovered
- Jan 10, 2025
- Materiality determined
- —
- Notification sent
- Mar 11, 2025
- Affected individuals
- 1,000
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Previously notified your office of this incident on or around January 2, 2025
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- Leak >180dMD AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.