MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

MDG Design and Construction

bd_a82f60548c7baa69 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 25, 2025

Filed

May 28, 2025

To disclose

5 weeks

Affected · nationwide

4,3141 in this filing

Linked

2 filings

Confidence

66%

Full breach record for MDG Design and Construction →

MDG Design and Construction LLC reported a ransomware attack on April 25, 2025, affecting 4,314 individuals. Suspicious activity was detected on the same day. The breach may have exposed names, SSNs, driver's licenses, financial account info, and medical/health insurance data. Written notices were sent on May 28, 2025. Systems were secured and an investigation launched, though specific data access was unconfirmed.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Apr 25, 2025 → Filed with AG May 28, 202533d ⏱ ME AG >30d5 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 5 weeks / 33 days

Apr 25, 2025

Begins

Apr 25, 2025

Discovered

May 28, 2025

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_612326c42faad2c52025-05-28Verified

Name: MDG Design and Construction
norm: mdg design and construction
Domain: mdgny.com

Name: MDG Design and Construction
norm: mdg design and construction
Domain: mdgny.com
Industry: Professional Servicesllm

Discovered: Apr 25, 2025
Breach occurred: Apr 25, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 28, 2025
Affected individuals: 4,314state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Provided written notice of this incident to relevant state regulators
Initial access: exploit_public_facing

During the incident: Secured computer systems
Investigated the matter
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided information on how to place a fraud alert and security freeze on one’s credit file
Provided contact details for the national consumer reporting agencies
Provided information on how to obtain a free credit report
Provided written notice of this incident to relevant state regulators
Changes made: Implementing additional safeguards and training to its employees
Reviewing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: ME AG >30d · 33d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 25, 2025
→ Filed with AG: May 28, 2025
33d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 25, 2025 → Filed with AG: May 28, 2025	33d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGMay 28 · first

Maine State AGMay 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ce854d17-80a3-40b7-a513-72827588a0b9.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2025
Raw hash: 2fdcbba9ec4bb710d7c74f7888fdfd43f3527cf3e487467cb7596acfc7a7c046

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMDG Design and Construction

Victim entityMDG Design and Construction

Incidentdiscovered Apr 25, 2025

Stated responseSecured computer systems

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov