DisclosureLens
Social EngineeringManufacturingManufacturingPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

General Dynamics

bd_c48bd971fce2d3b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 10, 2024

Filed

Dec 23, 2024

To disclose

11 weeks

Affected · nationwide

372 in this filing

Confidence

66%
Full breach record for General Dynamics →

General Dynamics Corp. reported a phishing incident where a fraudulent ad campaign directed employees to a fake login portal for a third-party benefits provider. Attackers used stolen credentials to access employee benefits accounts, compromising names, SSNs, DOBs, and bank details. 37 individuals affected (2 in Maine). Incident discovered Oct 10, 2024; notices sent Dec 23, 2024. Forensic firm engaged.

Maine clockDiscovered Oct 10, 2024 → Filed with AG Dec 23, 202474d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 9 days
discovery → filing · 11 weeks / 74 days

Oct 1, 2024

Begins

Oct 10, 2024

Discovered

Dec 23, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed37 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.