Social EngineeringPretextingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Eisen Machinery Inc
bd_f47b90c8af94342b · schema v1 · pii pii-v1
Full breach record for Eisen Machinery Inc →On December 12, 2025, Eisen, Inc. experienced a social engineering attack where a threat actor impersonated the California State Controller's Office to obtain a file containing unclaimed property compliance records. The file included names, addresses, emails, Social Security numbers, dates of birth, and unclaimed property balance information. Eisen, Inc. contained the incident, revoked access, and is providing 24 months of credit monitoring to affected individuals.
California clockDiscovered Dec 12, 2025 → Notified Jun 24, 2026194d ✗ CA 60-day late28 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_93075686bc85b479New Hampshire State AGfiled 2026-06-24Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-625365
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 24, 2026
- Raw hash
- cb5f57a009b02b61bb2b7caaf1377a72c2cd4dc2accc15bd8f1a5a9b69a99ec1
Reporting entity
- Name
- Eisen Machinery Incnorm: eisen machinery
- Domain
- eisenm.com
Victim entity
- Name
- Eisen Machinery Incnorm: eisen machinery
- Domain
- eisenm.com
Incident
- Discovered
- Dec 12, 2025
- Materiality determined
- —
- Notification sent
- Jun 24, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- External
- Regulator citations
- Notified governmental regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 28 weeks(194 days from discovery to filing)
- Compliance flags
- CA 60-day late · 194dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 12, 2025→ Notified: Jun 24, 2026194d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Jun 24, 2026→ AG copy submitted: Jun 24, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.