HackingOtherCustomer Data InvolvedPIIIdentity (basic)MediumContained

ALL STATES MATERIALS GROUP, INC.

bd_a6a0b09227782fa3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 25, 2025

Filed

Sep 23, 2025

To disclose

29 days

Affected · nationwide

3,268536 in this filing

Linked

6 records

Confidence

66%

Full breach record for ALL STATES MATERIALS GROUP, INC. →

All States Materials Group, Inc. reported an external system breach (hacking) occurring on August 22, 2025, discovered on August 25, 2025. The incident affected 3,268 individuals, including 536 Maine residents. The company provided written notification on September 23, 2025, and offered 24 months of identity theft protection services through IDX (a ZeroFox Company).

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 25, 2025 → Filed with AG Sep 23, 202529d ✓ ME AG ≤30d29 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days

discovery → filing · 29 days

Aug 22, 2025

Begins

Aug 25, 2025

Discovered

Sep 23, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 6 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_86d8ed62389d3b282025-08-25 · +29dVerified by operator

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_11094364dacbe72d2025-09-23Verified
Massachusetts State AGbd_6a029fcf2a2376202025-09-23Verified by operator
New Hampshire State AGPlaybd_a5eea54fae198a322025-09-23Verified
Indiana State AGbd_c2c6c270aef69e542025-09-23Verified

Name: Day Pitney LLP
norm: day pitney

Name: ALL STATES MATERIALS GROUP, INC.
norm: all states materials
Domain: asmg.com
Industry: Otherllm

Discovered: Aug 25, 2025
Breach occurred: Aug 22, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 23, 2025
Affected individuals: 3,268state + nationwide
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals
Offered 24 months of complimentary identity theft protection services through IDX, a ZeroFox Company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: ME AG ≤30d · 29d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 25, 2025
→ Filed with AG: Sep 23, 2025
29d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 25, 2025 → Filed with AG: Sep 23, 2025	29d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGSep 23 · first

Massachusetts State AGSep 23 · first

New Hampshire State AGSep 23 · first

Indiana State AGSep 23 · first

Maine State AGSep 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ad950e5a-f2d8-422a-b96a-4947b57238da.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 23, 2025
Raw hash: a49636a7d5ccb7ab639dab8d29bd4b9707603ac9a425a53b5ad80bd9ffb73c45

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityDay Pitney LLP

Victim entityALL STATES MATERIALS GROUP, INC.

Incidentdiscovered Aug 25, 2025

Stated responseSent written notification to affected individuals

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov