HackingManufacturingManufacturingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Mercury Aircraft, Inc.
bd_d9c102426f1a9633 · schema v1 · pii pii-v1
Full breach record for Mercury Aircraft, Inc. →Mercury Aircraft, Inc. experienced an external cybersecurity breach between February 18-19, 2025. The incident was discovered on February 27, 2025, when investigation revealed that certain personal information—including names, addresses, dates of birth, driver's license numbers, and Social Security numbers—may have been taken without authorization. Three Maine residents were among 3,023 total individuals affected. Experian IdentityWorks (12 months) was offered to affected individuals.
Maine clockDiscovered Feb 27, 2025 → Filed with AG Apr 10, 202542d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/eedd18c7-d8ec-4151-a802-de1816568e3a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2025
- Raw hash
- 75b20926e4f87330d519561c95b15198b1883a9683e22e44d8b639c84fe65129
Reporting entity
- Name
- Mercury Aircraft, Inc.norm: mercury aircraft
- Industry
- Other Commercial
Victim entity
- Name
- Mercury Aircraft, Inc.norm: mercury aircraft
- Industry
- Other Commercial
- Industry
- Manufacturingllm
Incident
- Discovered
- Feb 27, 2025
- Materiality determined
- —
- Notification sent
- Apr 9, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Law enforcement notified
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- ME AG >30d · 42d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 27, 2025→ Filed with AG: Apr 10, 202542d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.