MalwareRansomwareData EncryptedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Godwin
bd_fc21a80096a6c72c · schema v1 · pii pii-v1
Full breach record for Godwin →Godwin Manufacturing Co, Inc. notified the Maryland AG of a March 2024 ransomware incident. An unknown actor encrypted files and accessed data (names, SSNs) between March 5-11, 2024. One Maryland resident was affected. Godwin engaged forensic review, reported to federal law enforcement, provided 12 months of Experian credit monitoring, and implemented additional cybersecurity safeguards.
Maryland clock✗ MD AG >90d50 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376413.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 25, 2025
- Raw hash
- 5311129610460a792fcafc1100072a68a47d52c75cc3cc9fd55dcc897404b7b3
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Godwinnorm: godwin
- Domain
- godwinmfg.com
Incident
- Discovered
- Mar 11, 2024
- Materiality determined
- Feb 25, 2025
- Notification sent
- Feb 25, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this event to federal law enforcementproviding written notice of this event to appropriate state privacy regulators and the three major consumer reporting agencies
Compliance
- Time to disclose
- 50 weeks(351 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.