HackingManufacturingManufacturingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
McMillan Electric Company
bd_d2e0415a5648f7b6 · schema v1 · pii pii-v1
Full breach record for McMillan Electric Company →On or about October 29, 2024, McMillan Electric Company (Woodville, WI) discovered on January 13, 2025 that an unauthorized actor had gained access to its network environment and acquired personal information including full names and Social Security numbers. A total of 6,162 individuals were affected nationwide, with 2 Maine residents impacted. Consumer notifications were sent on February 13, 2025. Twelve months of credit monitoring through Identity Defense was offered to affected individuals.
Maine clockDiscovered Jan 13, 2025 → Filed with AG Feb 14, 202532d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 100 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_dc7542d78b4b540bLeak Sitemedusafiled 2024-11-05(101d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_b43d9ac1e73e98d4Indiana State AGfiled 2025-02-13(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dbfb250d-1f97-48da-99f5-b77fd7761da1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2025
- Raw hash
- c12efd0215fa52557f27b9fa8828166c4b390dfb33bd78d026a05ced2d0056f3
Reporting entity
- Name
- McMillan Electric Companynorm: mcmillan electric
- Domain
- mcmillanco.com
- Industry
- Other Commercial
Victim entity
- Name
- McMillan Electric Companynorm: mcmillan electric
- Domain
- mcmillanco.com
- Industry
- Other Commercial
- Industry
- Manufacturingllm
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Feb 13, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 13, 2025→ Filed with AG: Feb 14, 202532d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.