HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

National Coatings & Supplies, Inc.

bd_a83f43d32ac6a50a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 15, 2024

Filed

Dec 10, 2024

To disclose

17 weeks

Affected

25state residents only

Linked

4 filings

Confidence

63%

Full breach record for National Coatings & Supplies, Inc. →2 incidents on file

National Coatings & Supplies notified Montana residents of a security incident where unauthorized access occurred between Aug 13-15, 2024. Data copied included names, SSNs, financial account info, and government IDs. The company offered 12 months of credit monitoring via TransUnion. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 17 weeks / 117 days

Aug 13, 2024

Begins

Aug 15, 2024

Discovered

Dec 10, 2024

Filed

vs. sector median

+9 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_51734324bfda8bef2024-12-10Candidate
Massachusetts State AGbd_bc2187c5fe5c22ef2024-12-10Verified
New Hampshire State AGbd_ece537a708fdd8292024-12-10Verified

Name: National Coatings & Supplies, Inc.
norm: national coatings supplies

Name: National Coatings & Supplies, Inc.
norm: national coatings supplies
Industry: Retail & Consumerllm

Discovered: Aug 15, 2024
Breach occurred: Aug 13, 2024 – Aug 15, 2024
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 10, 2024
Affected individuals: 25state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Promptly took steps to secure the network
Launched an investigation into the nature and scope of the activity
Offering you access to complimentary credit monitoring and identity theft protection services for twelve months, through TransUnion
Changes made: Reviewing existing security polices
Implemented additional security measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(117 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGDec 10 · first

Massachusetts State AGDec 10 · first

New Hampshire State AGDec 10 · first

Montana State AGDec 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/03/Consumer-notification-letter-33.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 10, 2024
Raw hash: 5574c3c0e832fd868becf2514bf516e520333371cfcaadd6ff317901fe38d7b5

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityNational Coatings & Supplies, Inc.

Victim entityNational Coatings & Supplies, Inc.

Incidentdiscovered Aug 15, 2024

Stated responsePromptly took steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov