MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDPHIMediumActive

PMA Consultants

bd_fd0865727c08d584 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 7, 2024

Filed

Mar 17, 2025

To disclose

45 weeks

Affected

5state residents only

Linked

7 filings

Confidence

67%

Full breach record for PMA Consultants →

PMA Consultants notified the Maryland AG of a ransomware attack discovered on May 7, 2024. The incident affected 5 Maryland residents, exposing names, SSNs, alien registration numbers, passport numbers, driver's license numbers, and health insurance information. PMA engaged forensic specialists, reported to federal law enforcement, and offered 12 months of credit monitoring. The investigation and data review were ongoing at the time of notification.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d45 weeks discovery → filing

Incident timeline

discovery → filing · 45 weeks / 314 days

May 7, 2024

Discovered

Mar 17, 2025

Filed

vs. sector median

+26 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_7b8da585f4ff44552025-03-17Verified
New Hampshire State AGbd_7d2860b96ee0522a2025-03-17Verified
Indiana State AGbd_93723ad4fd2818342025-03-17Verified
Massachusetts State AGbd_ce35cec346b7fd9a2025-01-30 · +46dVerified

Show 2 more filings ↓up to 46d gap

Maine State AGbd_e55973011bb404be2025-01-30 · +46dCandidate
New Hampshire State AGbd_fee1b469d6f3bacd2025-01-30 · +46dCandidate

Name: Cipriani
norm: cipriani
Domain: cipriani.com

Name: PMA Consultants
norm: pma consultants
Industry: Professional Servicesllm

Discovered: May 7, 2024
Materiality determined: —
Notification sent: Mar 17, 2025
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: reported this incident to federal law enforcement

During the incident: Began working with its I.T. team and third-party forensic specialists to secure the network
Restore its systems to operability
Investigate the full nature and scope of the incident
Reported this incident to federal law enforcement
Provided notice to an initial wave of potentially impacted individuals
Began a comprehensive and time-consuming review of the potentially impacted files
Sent written notice of this incident to the potentially impacted Maryland residents
Offer of complimentary credit monitoring and identity theft protection services for twelve (12) months
Changes made: Offer of complimentary credit monitoring and identity theft protection services for twelve (12) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(314 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Massachusetts State AGJan 30 · first

Maine State AGJan 30 · first

New Hampshire State AGJan 30 · first

Maine State AG+46d

New Hampshire State AG+46d

Indiana State AG+46d

Maryland State AG+46d · this page

Pattern: first filing Jan 30 (MA), last Mar 17 (MD) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376559.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2025
Raw hash: 3f75eb24539aa586fc2000503cdaa7fee055ae9ce7137e059533ccc1a9aeeb17

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityCipriani

Victim entityPMA Consultants

Incidentdiscovered May 7, 2024

Stated responseBegan working with its I.T. team and third-party forensic specialists to secure the network

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov