DisclosureLens
MalwareTechnologyInformationRansomwareRansom DemandedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentHighContained

IES Communications, LLC

bd_d8af18dfb6f019d0 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 17, 2025

Filed

Jul 7, 2025

To disclose

16 weeks

Affected · nationwide

6,2411 in this filing

Linked

6 filings

Confidence

66%
Full breach record for IES Communications, LLC

IES Communications, LLC reported a cybersecurity incident on March 17, 2025, where a threat actor attempted to deploy ransomware and solicit payment. The actor may have gained unauthorized access to employee files containing PII, including SSNs and payroll data. 6,241 individuals were affected. IES engaged cybersecurity experts, notified law enforcement, and offered 24 months of credit monitoring.

Maine clockDiscovered Mar 17, 2025Filed with AG Jul 7, 2025112d ME AG >90d16 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 10 days
discovery → filing · 16 weeks / 112 days

Mar 7, 2025

Begins

Mar 17, 2025

Discovered

Jul 7, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident
A leak claim by chaos about this victim predates this filing by 138 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGJul 3 · first
Nebraska State AGJul 3 · first
Maine State AG+4d · this page

Pattern: first filing Jul 3 (IN), last Jul 8 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.