HackingCustomer Data InvolvedGovernment IDMedium

Elbit Systems of America, LLC

bd_d5f9ac72010bea50 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 8, 2022

Filed

Sep 25, 2022

To disclose

16 weeks

Affected · nationwide

3691 in this filing

Linked

5 filings

Confidence

50%

Full breach record for Elbit Systems of America, LLC →2 incidents on file

Elbit Systems of America, LLC experienced an external system breach on June 8, 2022, which was also discovered on the same day. The breach compromised names and Social Security numbers. A total of 369 individuals were affected, including one resident from Maine. In response, the company provided 12 months of identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 8, 2022 → Filed with AG Sep 25, 2022109d ✗ ME AG >90d16 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 16 weeks / 109 days

Jun 8, 2022

Begins

Jun 8, 2022

Discovered

Sep 25, 2022

Filed

This filing is one of 5 about the same incident.View merged incident

A leak claim by black_basta about this victim predates this filing by 91 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_f937459b0a5f62212022-06-26 · +91dVerified by operator

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_81bbd31d9b03ac6c2023-03-29 · +185dVerified by operator
Massachusetts State AGbd_833edd4bf302e7b72023-04-03 · +190dVerified by operator
Indiana State AGbd_e8241aea71ae62a42023-04-03 · +190dVerified by operator

Name: Elbit Systems of America, LLC
norm: elbit systems of america

Name: Elbit Systems of America, LLC
norm: elbit systems of america

Discovered: Jun 8, 2022
Breach occurred: Jun 8, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 369state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of identity protection services, including credit and dark web monitoring, and identity theft insurance.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(109 days from discovery to filing)
Compliance flags: ME AG >90d · 109dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 8, 2022
→ Filed with AG: Sep 25, 2022
109d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 8, 2022 → Filed with AG: Sep 25, 2022	109d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGSep 25 · first · this page

Montana State AG+185d

Massachusetts State AG+190d

Indiana State AG+190d

Pattern: first filing Sep 25 (ME), last Apr 3 (IN) — a 190-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/476d065d-c0a4-46ce-9a0c-97f7f9baf732.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2022
Raw hash: c0ccd93bc79a954fb24c6ce3ab46149d42167ab2570e857b0ac4a55e962ba378

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityElbit Systems of America, LLC

Victim entityElbit Systems of America, LLC

Incidentdiscovered Jun 8, 2022

Stated responseOffered 12 months of identity protection services, including credit and dark web monitoring, and identity theft insurance.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov