HackingManufacturingManufacturingTargetedData ExfiltratedPIIIdentity (basic)LowContained

Oceanside Glasstile Company

bd_ce164623d4709b40 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 17, 2024

Filed

Feb 12, 2025

To disclose

26 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Oceanside Glasstile Company →2 incidents on file

Oceanside Glasstile Company notified the Maryland AG of a breach where a cybercriminal accessed IT servers around August 15, 2024, obtaining personal information of 2 Maryland residents. The company engaged forensic investigators, secured systems, and will provide 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d26 weeks discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 26 weeks / 179 days

Aug 15, 2024

Begins

Aug 17, 2024

Discovered

Feb 12, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_9dccddb8139ef74d2025-02-12Verified
Indiana State AGbd_96973e482581a2872025-02-13 · +1dVerified
Maine State AGbd_234fcb33b7fa75c42025-03-03 · +19dCandidate

Name: Oceanside Glasstile Company
norm: oceanside glasstile

Name: Oceanside Glasstile Company
norm: oceanside glasstile
Industry: Manufacturingllm

Discovered: Aug 17, 2024
Breach occurred: Aug 15, 2024
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 13, 2025
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Attorney General
Initial access: exploit_public_facing

During the incident: Took the affected systems offline
Hired a cybersecurity forensic firm to investigate
Enhancing our system monitoring by deploying additional tools around endpoint detection, email filtering, and other software monitoring
Reviewing and enhancing our existing policies and procedures
Purging unnecessary network data
Mailing notices of the incident to impacted residents
Offering all residents 12 months of credit monitoring and identity theft restoration services at no cost through IDX
Changes made: Enhancing our system monitoring by deploying additional tools around endpoint detection, email filtering, and other software monitoring
Reviewing and enhancing our existing policies and procedures
Purging unnecessary network data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(179 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGFeb 12 · first

Maryland State AGFeb 12 · first · this page

Indiana State AG+1d

Maine State AG+19d

Pattern: first filing Feb 12 (NH), last Mar 3 (ME) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376350.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2025
Raw hash: 5c7df705acc945ecda9095715f70f7c0059bcf5318671969cafdf6c41f933022

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityOceanside Glasstile Company

Victim entityOceanside Glasstile Company

Incidentdiscovered Aug 17, 2024

Stated responseTook the affected systems offline

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov