MalwareManufacturingManufacturingRansomwareVulnerability ExploitPlayData EncryptedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PIIMediumContained

ALL STATES MATERIALS GROUP, INC.

bd_a5eea54fae198a32 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 25, 2025

Filed

Sep 23, 2025

To disclose

29 days

Affected

44state residents only

Linked

6 records

Confidence

67%

Full breach record for ALL STATES MATERIALS GROUP, INC. →

All States Materials Group, Inc. notified the NH AG of a ransomware incident involving the 'Play' group. Unauthorized access occurred Aug 22-25, 2025, affecting employee and vendor data including SSNs, bank details, and medical info. 44 NH residents affected. Incident contained; 24-month identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 29 days

Aug 22, 2025

Begins

Aug 25, 2025

Discovered

Sep 23, 2025

Filed

This filing is one of 6 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_86d8ed62389d3b282025-08-25 · +29dVerified by operator

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_11094364dacbe72d2025-09-23Verified
Massachusetts State AGbd_6a029fcf2a2376202025-09-23Verified by operator
Maine State AGbd_a6a0b09227782fa32025-09-23Candidate
Indiana State AGbd_c2c6c270aef69e542025-09-23Verified

Name: Day Pitney LLP
norm: day pitney

Name: ALL STATES MATERIALS GROUP, INC.
norm: all states materials
Domain: asmg.com
Industry: Manufacturingllm

Discovered: Aug 25, 2025
Breach occurred: Aug 22, 2025 – Aug 25, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 23, 2025
Affected individuals: 44state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Data elements: Social Security numberMedical information
Attack vector: Ransomware· Play
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: PlayExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Isolated affected systems
Engaged independent cybersecurity vendor Blue Mantis to investigate and contain the activity
Notifying relevant state authorities
Offering 24 months of complimentary identity theft protection services through IDX
Changes made: Deployment of a 24/7 Security Operations Center monitoring solution
Review and strengthening of firewall configurations and M365 security settings
Engagement of third-party cybersecurity experts to conduct ongoing testing and review of ASMG’s IT infrastructure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGSep 23 · first

Massachusetts State AGSep 23 · first

Maine State AGSep 23 · first

Indiana State AGSep 23 · first

New Hampshire State AGSep 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/all-states-materials-20250923.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 23, 2025
Raw hash: 6a5b88963d10a20ff8ce54ae424922a09946f9b03004bf5db00d41dd0bfae0f5

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityDay Pitney LLP

Victim entityALL STATES MATERIALS GROUP, INC.

Incidentdiscovered Aug 25, 2025

Stated responseIsolated affected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov