DisclosureLens
HackingManufacturingCustomer Data InvolvedFinancial accountFinancial credentialsMediumContained

Elemetal Capital LLC

bd_9d534ad0527a8fab · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 9, 2024

Filed

Mar 1, 2024

To disclose

21 days

Affected · nationwide

13,60813 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Elemetal Capital LLC

Elemetal, LLC reported a data breach affecting 13 Maine residents. The breach, which occurred on August 22, 2023, and was discovered on February 9, 2024, was the result of an external system breach (hacking). The compromised information includes names in combination with financial account numbers or credit/debit card numbers and their security codes. Elemetal began notifying affected individuals on March 1, 2024, and offered 24 months of credit monitoring and identity restoration services through IDX.

Leak gap clock Leak >90d21 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 171 days
discovery → filing · 21 days

Aug 22, 2023

Begins

Feb 9, 2024

Discovered

Mar 1, 2024

Filed

This filing is one of 2 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 165 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.