MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDCredentialsHighContained

Estrella Franchising, LLC

bd_f03d024fde018a94 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 22, 2025

Filed

Mar 3, 2025

To disclose

6 weeks

Affected · nationwide

16,3798 in this filing

Linked

5 filings

Confidence

66%

Full breach record for Estrella Franchising, LLC →

Estrella Franchising, LLC d/b/a Estrella Insurance experienced a ransomware attack on January 22, 2025. The incident affected approximately 16,379 individuals nationwide, including 8 Maryland residents. Compromised data included names, contact information, Social Security numbers, driver's license numbers, and online account credentials. The company reset passwords, restored backups, engaged forensic experts, and notified law enforcement. Identity protection services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Maryland clock⏱ MD AG >30d6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 40 days

Jan 22, 2025

Begins

Jan 22, 2025

Discovered

Mar 3, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_579714af179e3b712025-03-03Candidate
Nebraska State AGbd_7354da2d856488aa2025-03-03Verified
Massachusetts State AGbd_7aa63a9c098f1c0d2025-03-03Verified
Indiana State AGbd_c4ee8fadef7f2ce92025-03-03Verified

Name: Estrella Franchising, LLC
norm: estrella franchising

Name: Estrella Franchising, LLC
norm: estrella franchising
Also named: Estrella Franchising, LLCdba oflegal entity
Estrella Insurancedba oftrade name
Industry: Financial Servicesllm

Discovered: Jan 22, 2025
Breach occurred: Jan 22, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 3, 2025
Affected individuals: 16,379state + nationwide
Data types: Identity (basic)Government IDCredentials
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Attorney General

During the incident: Resetting passwords
Restoring files from backup data
Enhancing security safeguards
Retaining outside legal and forensic experts to assist
Notified law enforcement and is cooperating with their investigation
Changes made: Offering 24 months of identity protection services through Experian Identity Works
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: MD AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGMar 3 · first

Nebraska State AGMar 3 · first

Massachusetts State AGMar 3 · first

Indiana State AGMar 3 · first

Maryland State AGMar 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376471.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2025
Raw hash: cb1f8c535d7ce5c7b07f1eae9c1844597c1b81f9915d4f1d3d301923aca5a96a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEstrella Franchising, LLC

Victim entityEstrella Franchising, LLC

Incidentdiscovered Jan 22, 2025

Stated responseResetting passwords

ComplianceMD AG >30d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov