Elyria Foundry Holdings LLC suffered a data breach on June 24, 2024, caused by unauthorized external access to its systems. The incident exposed the personal information of 2,193 individuals, including names and Social Security numbers highly sensitive data that significantly elevates the risk of identity theft and financial fraud. The company notified at least one affected Maine resident on September 3, 2024, and is providing 12 months of identity theft protection services via Cyber Scout as a remedial measure. The breach’s focus on customer PII (Personally Identifiable Information) without evidence of ransomware involvement underscores a severe compromise of trust and regulatory compliance risks, particularly under data protection laws. The delayed disclosure (nearly 3 months) may further exacerbate reputational and legal consequences, as affected individuals remain vulnerable to exploitation during the interim period.
TPRM report: https://www.rankiteo.com/company/elyria-foundry
"id": "ely642090125",
"linkid": "elyria-foundry",
"type": "Breach",
"date": "6/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 2193,
'industry': 'Manufacturing (Foundry)',
'location': 'Elyria, Ohio (inferred from name; exact '
'location not specified)',
'name': 'Elyria Foundry Holdings LLC',
'type': 'Private Company'}],
'attack_vector': 'External System Access',
'customer_advisories': 'Written notice provided to affected individuals '
'(e.g., Maine resident on 2024-09-03)',
'data_breach': {'data_exfiltration': 'Likely (data accessed by external '
'actor)',
'number_of_records_exposed': 2193,
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High (includes SSNs)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2024-06-24',
'date_publicly_disclosed': '2024-09-03',
'description': 'The Maine Office of the Attorney General reported that Elyria '
'Foundry Holdings LLC experienced a data breach due to '
'external system access on June 24, 2024. The breach '
'potentially affected the personal information of 2,193 '
'individuals, including names and Social Security numbers. A '
'written notice was provided to one Maine resident on '
'September 3, 2024. Identity theft protection services (12 '
'months via Cyber Scout) are being offered to affected '
'individuals.',
'impact': {'brand_reputation_impact': 'Potential (due to PII exposure)',
'data_compromised': ['Names', 'Social Security Numbers'],
'identity_theft_risk': 'High (PII including SSNs exposed)'},
'investigation_status': 'Ongoing/Completed (notification sent; no further '
'details)',
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General (as '
'per state data breach '
'laws)'},
'response': {'communication_strategy': 'Written notice to affected '
'individuals (e.g., Maine resident '
'notified on 2024-09-03)',
'incident_response_plan_activated': 'Likely (based on '
'notification and '
'remediation)',
'recovery_measures': 'Identity theft protection services (12 '
'months) for affected individuals',
'third_party_assistance': 'Cyber Scout (for identity theft '
'protection)'},
'title': 'Elyria Foundry Holdings LLC Data Breach (June 2024)',
'type': 'Data Breach'}