HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

ASC Machine Tools

bd_d03da56f4b3fad6a · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 2, 2025

Filed

Jul 18, 2025

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for ASC Machine Tools →

ASC Machine Tools Inc. reported a data security incident to the Nebraska Attorney General on July 25, 2025. Suspicious activity was detected on May 2, 2025, leading to system disconnection and forensic investigation. The investigation confirmed that personal information, including names, addresses, and Social Security numbers, of one Nebraska resident was copied. ASC offered 12 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

May 2, 2025

Discovered

Jul 18, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

A leak claim by worldleaks about this victim predates this filing by 75 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteworldleaksbd_dcbd0fab4a3dcc1e2025-05-04 · +75dCandidate

Name: ASC Machine Tools
norm: asc machine tools
Domain: ascmt.com

Name: ASC Machine Tools
norm: asc machine tools
Domain: ascmt.com
Industry: Manufacturingllm

Discovered: May 2, 2025
Materiality determined: —
Notification sent: Jul 18, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Disconnected its systems
Engaged independent computer forensic experts to assist
Changed passwords to user accounts
Restored its systems
Implemented additional restrictions on its systems
Offered 12 months of credit monitoring and identity protection services through TransUnion
Changes made: Implemented additional restrictions on its systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/eb60ad90-e8f7-4a3c-9e08-3526bf4253c7.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 18, 2025
Raw hash: fa293568ceaee380ab932dc94ea45cdbb82756370d451e886647c60b32a4f48c

Linked disclosures

Ransomware claims (1)

Reporting entityASC Machine Tools

Victim entityASC Machine Tools

Incidentdiscovered May 2, 2025

Stated responseDisconnected its systems

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov