HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICMediumContained
Clark Material Handling Company
bd_ea00d9c1353f47ea · schema v1 · pii pii-v1
Full breach record for Clark Material Handling Company →Clark Material Handling Company's network was accessed by an unauthorized third party via a compromised web developer account between Feb 14–Mar 3, 2024. Files containing SSNs, names, and potentially passport/license numbers, tax IDs, financial accounts, payment cards, and medical/insurance info were copied. Discovered July 9, 2024. 8 Maine residents and 1,410 total affected.
Maine clockDiscovered Jul 9, 2024 → Filed with AG Aug 22, 202444d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by hunters_international about this victim predates this filing by 149 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_499bb02156e221faNew Hampshire State AGfiled 2024-08-22Verified
- bd_c1ebcb289729b165Indiana State AGfiled 2024-08-22Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/235deb97-dd10-4490-8cd2-7dea4a4b2f6b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 22, 2024
- Raw hash
- 057934c4d37f2eb6935340a8148d1b7b1b75b4dbd6bedf29599b9db78df3e927
Reporting entity
- Name
- Clark Material Handling Companynorm: clark material handling
- Domain
- clarkmhc.com
- Industry
- Other Commercial
Victim entity
- Name
- Clark Material Handling Companynorm: clark material handling
- Domain
- clarkmhc.com
- Industry
- Other Commercial
Incident
- Discovered
- Jul 9, 2024
- Materiality determined
- —
- Notification sent
- Aug 22, 2024
- Affected individuals
- 8
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified Maine Attorney General
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- ME AG >30d · 44dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 9, 2024→ Filed with AG: Aug 22, 202444d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.