Social EngineeringTechnologyInformationPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)PIILowContained

Max-Tech, Inc

bd_ab6c677aa02ff5d2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 20, 2023

Filed

Jun 22, 2023

To disclose

22 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Max-Tech, Inc →

Max-Tech Inc. notified consumers of unauthorized access to employee email accounts due to suspicious activity (likely phishing) between Sept 2022 and Jan 2023. The incident involved access to names and other personal information. Max-Tech secured accounts, investigated, and offered credit monitoring. No fraud reported.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday22 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 141 days

discovery → filing · 22 weeks / 153 days

Sep 1, 2022

Begins

Jan 20, 2023

Discovered

Jun 22, 2023

Filed

vs. sector median

+3 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_adc7b8f047389a292023-06-22Candidate
New Hampshire State AGbd_a47e08282fe51bae2023-06-26 · +4dVerified
Massachusetts State AGbd_7d4342656d09202c2023-06-30 · +8dVerified

Name: Max-Tech, Inc
norm: max tech

Name: Max-Tech, Inc
norm: max tech
Industry: Technologyllm

Discovered: Jan 20, 2023
Breach occurred: Sep 1, 2022 – Jan 24, 2023
Undetected for: 141 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 21, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: We will also notify applicable federal and state regulators, as necessary.
Initial access: phishing_link

During the incident: Immediately took steps to secure all email accounts
Launched an investigation with assistance from qualified professionals
Undertook a comprehensive and time-intensive review of the involved emails
Offering [Extra4] months of complimentary access to credit monitoring services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(153 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGJun 22 · first

Vermont State AGJun 22 · first · this page

New Hampshire State AG+4d

Massachusetts State AG+8d

Pattern: first filing Jun 22 (ME), last Jun 30 (MA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-06-22-max-tech-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 22, 2023
Raw hash: d4eddc23c6f1a80bb1fdd1bc4dfd4f9ca6796c64efcd7b3b96fad2a327c6f295

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMax-Tech, Inc

Victim entityMax-Tech, Inc

Incidentdiscovered Jan 20, 2023

Stated responseImmediately took steps to secure all email accounts

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov