HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

PIRELLI TIRE LLC

bd_b3678bdc12c6fde5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 24, 2024

Filed

Dec 18, 2024

To disclose

12 weeks

Affected · nationwide

3321 in this filing

Confidence

66%

Full breach record for PIRELLI TIRE LLC →

Pirelli Tire LLC reported unauthorized access to personal information (name and SSN) stored on Pirelli Group IT networks between Sept 18-19, 2024. Discovered Sept 24, 2024. 332 individuals affected, including 1 Maine resident. Notifications sent Dec 19, 2024, offering 1 year of Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 24, 2024 → Filed with AG Dec 18, 202485d ⏱ ME AG >30d12 weeks discovery → filing

Incident timeline

undetected · 6 days

discovery → filing · 12 weeks / 85 days

Sep 18, 2024

Begins

Sep 24, 2024

Discovered

Dec 18, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed332 affectedView incident

Name: Dentons US LLP
norm: dentons us

Name: PIRELLI TIRE LLC
norm: pirelli tire
Domain: pirelli.com
Industry: Manufacturingllm

Discovered: Sep 24, 2024
Breach occurred: Sep 18, 2024 – Sep 19, 2024
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 19, 2024
Affected individuals: 332state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: sent notification to the relevant authorities
Initial access: valid_credentials

During the incident: Changed passwords for resources potentially involved in the incident
Engaged external cyber security and legal counsel to help minimize the impact
Engaged with online monitoring companies to assess whether any accessed information has been made available through the dark web
Sent notification to the relevant authorities
Secured the identity monitoring services of Equifax
Changes made: Put in place security measures to avoid this from happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: ME AG >30d · 85dME resident >60d · 86d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 24, 2024
→ Filed with AG: Dec 18, 2024
85d 30 days (soft) ME AG >30d
Maine
Discovered: Sep 24, 2024
→ Notified: Dec 19, 2024
86d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 24, 2024 → Filed with AG: Dec 18, 2024	85d	30 days (soft)	ME AG >30d
Maine	Discovered: Sep 24, 2024 → Notified: Dec 19, 2024	86d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/faa0611c-b310-4ecf-86ae-2bde6a409891.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2024
Raw hash: 79cb3787bc982e24b0ec5be5bec676350e5050166501b187486547d54c95b86f

Reporting entityDentons US LLP

Victim entityPIRELLI TIRE LLC

Incidentdiscovered Sep 24, 2024

Stated responseChanged passwords for resources potentially involved in the incident

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov