MalwareOtherRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Mark Dunning Industries Inc.

bd_a9252d44adca46ca · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 22, 2024

Filed

Feb 11, 2025

To disclose

16 weeks

Affected

6state residents only

Linked

7 filings

Confidence

66%

Full breach record for Mark Dunning Industries Inc. →

Mark Dunning Industries, Inc. notified Maryland AG of a ransomware attack on Nov 7, 2023, discovered Oct 22, 2024. 6 Maryland residents affected. Data included names, DOB, addresses, driver's licenses, financial accounts, PHI. Response included IR engagement, containment, and 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d16 weeks discovery → filing

Incident timeline

undetected · 350 days

discovery → filing · 16 weeks / 112 days

Nov 7, 2023

Begins

Oct 22, 2024

Discovered

Feb 11, 2025

Filed

vs. sector median

+8 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_d88139918256f5c32025-02-11Verified
Maine State AGbd_06a545fbd47e3b1c2025-02-12 · +1dVerified
Massachusetts State AGbd_a7f303444fcb863f2025-02-13 · +2dVerified
Indiana State AGbd_0b093f259df356e22025-02-07 · +4dCandidate

Show 2 more filings ↓up to 45d gap

Nebraska State AGbd_2d3ea94e9b6009872025-03-13 · +30dVerified
New Hampshire State AGbd_fb3c09d2d0b23dfd2025-03-28 · +45dVerified

Name: The Beckage Firm
norm: the beckage firm
Domain: thebeckagefirm.com

Name: Mark Dunning Industries Inc.
norm: mark dunning
Industry: Otherllm

Discovered: Oct 22, 2024
Breach occurred: Nov 7, 2023
Undetected for: 350 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 7, 2025
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged incident response professionals
Launched an investigation
Engaged an incident response team and data security professionals
Stopped the unauthorized access
Provided twelve months of credit monitoring services and fully managed id theft recovery services
Changes made: Provided twelve months of credit monitoring services and fully managed id theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Indiana State AGFeb 7 · first

New Hampshire State AG+4d

Maryland State AG+4d · this page

Maine State AG+5d

Massachusetts State AG+6d

Nebraska State AG+34d

New Hampshire State AG+49d

Pattern: first filing Feb 7 (IN), last Mar 28 (NH) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376345.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2025
Raw hash: 4cb4d038730e9db47898eb86cb02087ac799890055e4cf9d0d12aa9df4197506

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe Beckage Firm

Victim entityMark Dunning Industries Inc.

Incidentdiscovered Oct 22, 2024

Stated responseEngaged incident response professionals

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov