MalwareRansomwareCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedRansom DemandedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
American Plumbing & Heating Corporation
bd_df85026e11fe22e3 · schema v1 · pii pii-v1
Full breach record for American Plumbing & Heating Corporation →On December 18, 2024, American Plumbing & Heating Corporation (Norwell, MA) discovered that files on its systems were locked by a computer virus (ransomware) and that certain files were copied without permission. The review was completed around January 16, 2025. Information involved: name and Social Security number. Approximately 962 individuals affected total, including 10 Maine residents. Written notification sent February 4, 2025. 24-month credit monitoring offered via TransUnion/Cyberscout.
Leak gap clock✗ Leak >180d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by lockbit2 about this victim predates this filing by 1120 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_22ab074d07dc14b8Leak Siteransomhubfiled 2025-01-10(24d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_11381bc8eadb3aeaNew Hampshire State AGfiled 2025-02-04Verified
- bd_cafced506e218c57Maryland State AGfiled 2025-02-04Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca13ae44-511f-43a7-bec9-72b5eb1c4cd4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2025
- Raw hash
- e48500e72f5f36002747bd73a35820406609c9deee09b1df83f72c6177d56f1a
Reporting entity
- Name
- American Plumbing & Heating Corporationnorm: american plumbing heating
- Domain
- amerplumb.com
- Industry
- Other Commercial
Victim entity
- Name
- American Plumbing & Heating Corporationnorm: american plumbing heating
- Domain
- amerplumb.com
- Industry
- Other Commercial
Incident
- Discovered
- Jan 16, 2025
- Materiality determined
- —
- Notification sent
- Feb 4, 2025
- Affected individuals
- 10
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement regarding the event
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 16, 2025→ Filed with AG: Feb 4, 202519d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.