Confirmed breach. Intrusion Feb 1, 2024, discovered Feb 4, 2024 — the first regulatory filing landed 145 days later (flagged late). 1,778 individuals reported across the linked filings.
incident inc_b07c8160b93e4cb9 · merge_method human · confidence 100%
Litigation Timing
Notification delay
145days
Discovered → first regulatory filing
Discovery variance
81days
Range of discovered_at dates across filings
Leak precedence
Regulatory clocksMaine✗ ME AG >90d · 145dLeak gap✗ Leak >180dFull clock table in Litigation Timeline
Leak SiteState AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
146days
Gap between first leak claim and first regulatory filing
Filing span
262days
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
Affected (total reported)
1,778
Data types
3
PII · Identity (basic) · Government ID
Jurisdictions
4
IN ME NH
Linked filings
5
Leak Site · State AG
Sensitive data
identity_government
Affected residents by state
per-filing reported counts
IN1,778
ME3
ME2
NH1
State AGs report only their own residents; bars show per-filing counts.
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Feb 1, 2024
When the intrusion reportedly occurred, per the linked filings
🌐GLOBALClaimed by LockBit 3.xFirst sightinglinked via shared-victim match · 100%
Eastern’s original shipyard was established in 1976 for the purpose of constructing commercial fishing boats for the company’s founder and President, Brian R. D’Isernia. As the owner of a fleet of commercial fishing vessels, Mr. D’Isernia ventured in...
Breach discoveredletter-grounded
Feb 4, 2024
Reported by MAINE AG, NEW HAMPSHIRE AG filings
81 days
Breach discoveredconflicts with Feb 4, 2024
Apr 25, 2024
Reported by MAINE AG filing
64 days
🦞Maine State AGLeaked → filing gap · 5 molinked via shared-victim match · 100%
Eastern Shipbuilding Group, a commercial entity, reported an external system breach (hacking) that occurred on February 1, 2024, and was discovered on February 4, 2024. The breach affected 3 Maine residents, who were notified on June 28, 2024. The company offered 12 months of credit monitoring services through Experian to those affected.
🏎️Indiana State AGLeaked → filing gap · 5 molinked via multistate filing link · 100%
Eastern Shipbuilding Group reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-01 and was reported on 2024-06-28. 5 Indiana residents were affected. 1,778 individuals affected in total.
Affected (this filing): 1,778
115 days
🦞Maine State AGLeaked → filing gap · 9 molinked via shared-victim match · 100%
Eastern Shipbuilding Group (ESG), a shipbuilding manufacturer based in Panama City, FL, experienced an external network breach first detected on February 4, 2024. An unknown actor accessed files and folders containing names and Social Security numbers. The forensic review completed April 25, 2024. In total, 2,958 individuals were affected, including 2 Maine residents (later supplemented to 4 total Maine residents). ESG offered 12 months of Experian credit monitoring to affected individuals.
⛰️New Hampshire State AGMost recentLeaked → filing gap · 9 molinked via multistate filing link · 100%
Eastern Shipbuilding Group notified New Hampshire of a security incident discovered on Feb 4, 2024, where an unknown actor accessed certain files. One NH resident was identified. ESG engaged forensic specialists, notified law enforcement, and offered credit monitoring via Experian. Data types included PII.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 3
ME AG >90d · 145dME resident >60d · 145dLeak >90d
Leak >90d
Affected (this filing): 2
ME AG >90d · 179dLeak >180dME resident >60d · 179d