ASARCO LLC

ASARCO LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-026). The register records the breach as discovered on March 1, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

ASARCO LLC reported an external system breach that occurred and was discovered on March 1, 2021. The breach affected 9 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company offered affected individuals a 12-month membership to NortonLifeLock Defender Choice for identity theft protection.

Asarco LLC experienced a ransomware attack on March 1, 2021, where a malicious third party encrypted servers in the US and Mexico. On May 3, 2021, it was discovered that some data had been made public without authorization. Approximately 4 New Hampshire residents were affected. Compromised data included names, financial account information, SSNs, driver's license numbers, health insurance policy numbers, dates of birth, and medical information. Asarco disconnected servers, isolated the data center, and engaged a cybersecurity firm. Credit monitoring was offered.

Asarco LLC notified Montana of a March 1, 2021 ransomware incident where a malicious third party encrypted servers in the US and Mexico. On May 3, 2021, unauthorized public data release was discovered. Compromised data included names, SSNs, driver's licenses, financial account info, and medical/insurance data. Asarco isolated systems, engaged forensic experts, and offered 12 months of credit monitoring.

ASARCO LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-16. 20 Massachusetts residents were affected. The report records the breach type as electronic.

Asarco LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-03-01 and was reported on 2021-07-16. 91 Indiana residents were affected. 28,000 individuals affected in total.

Asarco LLC reported a ransomware attack on March 1, 2021, which encrypted servers in the US and Mexico. Forensic investigation later confirmed compromise of personal information including names, SSNs, driver's license numbers, financial account info, and health insurance policy numbers for approximately 670 Washington residents. Notices were sent on June 2, 2021.