HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Plymouth Tube

bd_d23db3aea0a73190 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 29, 2024

Filed

Mar 19, 2024

To disclose

7 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

61%

Full breach record for Plymouth Tube →

Plymouth Tube Company notified affected individuals of a data breach where an unauthorized person accessed systems between Jan 27-29, 2024. The company detected the activity on Jan 29, 2024, engaged a cybersecurity firm, and reported to law enforcement. Personal information was accessed, and two years of complimentary identity monitoring via IDX was offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 2 days

discovery → filing · 7 weeks / 50 days

Jan 27, 2024

Begins

Jan 29, 2024

Discovered

Feb 29, 2024

Scope determined

Mar 19, 2024

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by cactus about this victim predates this filing by 53 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecactusbd_a7d07488ea7408432024-01-26 · +53dVerified by operator

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_254586f27ad178932024-03-19Verified
Massachusetts State AGbd_65450b537206b2912024-03-19Verified
Indiana State AGbd_60efd9bbce21b60c2024-03-13 · +6dVerified
Illinois State AGbd_b98b10a0e583e0202024-03-01 · +18dCandidate

Name: Plymouth Tube
norm: plymouth tube
Domain: plymouth.com

Name: Plymouth Tube
norm: plymouth tube
Domain: plymouth.com
Industry: Manufacturingllm

Discovered: Jan 29, 2024
Breach occurred: Jan 27, 2024 – Jan 29, 2024
Undetected for: 2 daysoccurrence → discovery
Materiality determined: Feb 29, 2024
Notification sent: Mar 13, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took immediate action to contain the incident
Began an investigation with the assistance of a cybersecurity firm
Reported the incident to law enforcement
Analyzed the files involved
Offering you two years of complimentary identity monitoring services through IDX, A ZeroFox Company
Changes made: Take steps to enhance the security of our computer systems to help prevent events such as this from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGMar 1 · first

Indiana State AG+12d

Montana State AG+18d

Massachusetts State AG+18d

New Hampshire State AG+18d · this page

Pattern: first filing Mar 1 (IL), last Mar 19 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/plymouth-tube-company-20240319.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2024
Raw hash: b0fe4375c1c45b43178c3f3314c4adf89256aaff5959152cfebf2725721e8ca3

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityPlymouth Tube

Victim entityPlymouth Tube

Incidentdiscovered Jan 29, 2024

Stated responseTook immediate action to contain the incident

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov