MalwareRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)MediumContained

T.R.A. Industries Inc.

bd_cf004e66165023ab · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 5, 2025

Filed

Sep 26, 2025

To disclose

7 weeks

Affected · nationwide

12,1221 in this filing

Linked

5 filings

Confidence

65%

Full breach record for T.R.A. Industries Inc. →

T.R.A. Industries, Inc. reported a ransomware incident affecting 12,122 individuals, including 1 Maine resident. The breach was detected on August 5, 2025, and the intruder activated ransomware on August 9, 2025. Affected data included names and addresses. The company contained the breach, restored systems from backups, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 5, 2025 → Filed with AG Sep 26, 202552d ⏱ ME AG >30d7 weeks discovery → filing

Incident timeline

Aug 9, 2025

Begins

Sep 26, 2025

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_05dc497013009ab92025-09-26Verified
Washington State AGbd_98968156cffaae062025-09-26Candidate
Montana State AGbd_e66d82e7a9a4c3102025-09-26Verified
New Hampshire State AGbd_0be10f3ee4e704f02025-09-30 · +4dVerified

Name: T.R.A. Industries Inc.
norm: tra industries

Name: T.R.A. Industries Inc.
norm: tra industries

Discovered: Aug 5, 2025
Breach occurred: Aug 9, 2025
Materiality determined: —
Notification sent: Sep 26, 2025
Affected individuals: 12,122state + nationwide
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Terminated the intruder’s access to our systems
Began the process of restoring our systems using backup data
Finished our review of unencrypted data on our computer systems
Offering complimentary credit monitoring through the link provided below
Offering 12 months of Experian IdentityWorks identity restoration assistance and fraud detection tools including a credit report, credit monitoring, and identity theft insurance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: ME AG >30d · 52d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 5, 2025
→ Filed with AG: Sep 26, 2025
52d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 5, 2025 → Filed with AG: Sep 26, 2025	52d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGSep 26 · first

Washington State AGSep 26 · first

Montana State AGSep 26 · first

Maine State AGSep 26 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/07bbf6a5-32da-4c3d-9117-7b77da449762.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2025
Raw hash: 2ecc38de9c6c483c665af1c064c355f872a5ac6e8eec4531353a27293a6865a8

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityT.R.A. Industries Inc.

Victim entityT.R.A. Industries Inc.

Incidentdiscovered Aug 5, 2025

Stated responseTerminated the intruder’s access to our systems

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov