UnknownGovernment IDFinancial accountPCIHigh

Steel River Systems

bd_fd241ce8fbc2a09f · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Dec 22, 2022

To disclose

—

Affected

1,438state residents only

Linked

10 filings

Confidence

95%

Full breach record for Steel River Systems →

Steel River Systems, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-12-22. 1,438 Massachusetts residents were affected. The report records the breach type as electronic.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Dec 22, 2022

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_11b9cff4f7a5f8872022-12-22Candidate
Indiana State AGbd_4a8fce033b24159b2022-12-22Verified
South Carolina State AGbd_4c0eb3ca1f470f772022-12-22Verified
Washington State AGbd_50250b1def71437b2022-12-22Verified

Show 5 more filings ↓up to 5d gap

California State AGbd_732427a17292cf862022-12-22Verified
Oregon State AGbd_9219b6adec56e5d62022-12-22Verified
Montana State AGbd_f0ffe48699e5f8e62022-12-22Verified
Delaware State AGbd_f9d8f9684ec666522022-12-22Verified
New Hampshire State AGbd_e6ec4778ce06dff02022-12-27 · +5dVerified

Name: Steel River Systems
norm: steel river
Domain: steelriversystems.com

Name: Steel River Systems
norm: steel river
Domain: steelriversystems.com

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1,438state-resident count only
Data types: Government IDFinancial accountPCI
Data elements: Social Security numberFinancial account numberDriver's licence numberPayment card number
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Maine State AGDec 22 · first

Indiana State AGDec 22 · first

South Carolina State AGDec 22 · first

Washington State AGDec 22 · first

California State AGDec 22 · first

Oregon State AGDec 22 · first

Montana State AGDec 22 · first

Delaware State AGDec 22 · first

Massachusetts State AGDec 22 · first · this page

New Hampshire State AG+5d

Pattern: first filing Dec 22 (ME), last Dec 27 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2022/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2022
Raw hash: 6e856ba8ba97beba624fc9efe7ad97d3b6732c5454c25a0c4973f56fca8a23a9

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entitySteel River Systems

Victim entitySteel River Systems

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov