HackingManufacturingManufacturingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Smith Fire Systems

bd_9fac79441d3ff5dc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 10, 2025

Filed

Dec 23, 2025

To disclose

6 weeks

Affected

785state residents only

Linked

2 filings

Confidence

70%

Full breach record for Smith Fire Systems →

Smith Fire Systems, Inc. reported unauthorized access to its network between Oct 23 and Nov 9, 2025, discovered on Nov 10, 2025. The incident affected 785 Washington residents, exposing names, SSNs, DOBs, driver's license numbers, and financial account information. Smith Fire notified law enforcement, engaged third-party forensic investigators, and began mailing notifications on Dec 23, 2025, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 18 days

discovery → filing · 6 weeks / 43 days

Oct 23, 2025

Begins

Nov 10, 2025

Discovered

Dec 23, 2025

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteanubisbd_2b1469455b2de35c2025-12-04 · +18dCandidate

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: Smith Fire Systems
norm: smith fire
Domain: smithfire.com
Industry: Manufacturingllm

Discovered: Nov 10, 2025
Breach occurred: Oct 23, 2025 – Nov 9, 2025
Undetected for: 18 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 23, 2025
Affected individuals: 785state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General Consumer Protection Division
Initial access: valid_credentials

During the incident: Took immediate action to secure its environment
Notified law enforcement
Launched an investigation with the assistance of third-party cybersecurity firms
Established a dedicated, toll-free call center
Changes made: Implemented additional measures to enhance the security of its network
Offered the involved residents a complimentary one-year membership to credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM21024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2025
Raw hash: be24cf039ae70a0e8f5ec6f7637ec418309883e335bb998abde734240f824c35

Linked disclosures

Ransomware claims (1)

Reporting entityBAKER & HOSTETLER LLP

Victim entitySmith Fire Systems

Incidentdiscovered Nov 10, 2025

Stated responseTook immediate action to secure its environment

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com