HackingManufacturingManufacturingCustomer Data InvolvedIdentity (basic)Government IDMediumActive

AY McDonald Industries Inc

bd_9871d719ac896c28 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 30, 2025

Filed

Feb 12, 2025

To disclose

13 days

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for AY McDonald Industries Inc →2 incidents on file

A.Y. McDonald Industries Inc. notified the Maryland AG of a data security incident occurring on Jan 12, 2025. An unauthorized actor accessed files containing full names and Social Security Numbers. Approximately 2 Maryland residents are affected. Notification to individuals began Feb 12, 2025, including credit monitoring services. Investigation was ongoing at the time of filing.

J jump to incidentP pin to compareR raw source

Maryland clock✓ MD AG ≤30d13 days discovery → filing

Incident timeline

undetected · 18 days

discovery → filing · 13 days

Jan 12, 2025

Begins

Jan 30, 2025

Discovered

Feb 12, 2025

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Iowa State AGbd_80ca509ba2528f2c2025-02-12Candidate

Name: AY McDonald Industries Inc
norm: ay mcdonald
Domain: aymcdonald.com

Name: AY McDonald Industries Inc
norm: ay mcdonald
Domain: aymcdonald.com
Industry: Manufacturingllm

Discovered: Jan 30, 2025
Breach occurred: Jan 12, 2025
Undetected for: 18 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 12, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Maryland Attorney General

During the incident: Engaged external cybersecurity professionals to investigate
Providing notice to the affected individuals
Providing complimentary credit monitoring services
Advising affected residents to remain vigilant in reviewing financial account statements
Advising affected residents about the process for placing a fraud alert and/or security freeze on their credit files
Providing contact information for consumer reporting agencies and the Federal Trade Commission
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluates and modifies practices to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: MD AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Iowa State AGFeb 12 · first

Maryland State AGFeb 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376354.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2025
Raw hash: 0d6668aab0a6f2fd036ea300b58ca07143e4bfd375386c98942d9578265b42c4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAY McDonald Industries Inc

Victim entityAY McDonald Industries Inc

Incidentdiscovered Jan 30, 2025

Stated responseEngaged external cybersecurity professionals to investigate

ComplianceMD AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov