HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
ERMI
bd_9f7664f300747a66 · schema v1 · pii pii-v1
Full breach record for ERMI →ERMI, LLC reported a cybersecurity incident in Massachusetts where an unauthorized individual gained access to employee email accounts between February 15, 2025, and August 14, 2025. The breach potentially exposed personal information, including government IDs and financial account numbers, of a limited number of individuals. ERMI engaged external cybersecurity professionals, contained the incident, and offered 24 months of complimentary credit monitoring services to affected parties.
Massachusetts clock✗ MA AG >90d40 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_6f3c9fcbecab88f2California State AGfiled 2026-05-26(25d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-842-ermi-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- fd4fcd1e8b7afb1335953001e4aa88f8eff9f05d77a3f1f5918c11214d41ef11
Reporting entity
- Name
- ERMInorm: ermi
- Domain
- ermi-motion.com
Victim entity
- Name
- ERMInorm: ermi
- Domain
- ermi-motion.com
Incident
- Discovered
- Jul 25, 2025
- Materiality determined
- Apr 17, 2026
- Notification sent
- Apr 17, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 40 weeks(280 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.