All States Materials Group Data Breach Lawsuit

All States Materials Group, Inc. (“ASMG”) has disclosed a cybersecurity incident that exposed sensitive personal and financial information belonging to employees and vendors. The breach, discovered in August 2025, was caused by a ransomware attack conducted by the “Play” ransomware group. ASMG has since contained the threat, notified affected individuals, and implemented significant security enhancements.

All States Materials Group’s Data Breach Investigation

On August 25, 2025, ASMG detected suspicious activity within its network systems. The company’s internal IT team immediately isolated affected servers and engaged Blue Mantis, an independent cybersecurity firm, to investigate and contain the incident. The investigation determined that a cybercriminal had gained unauthorized access to limited portions of ASMG’s network beginning on August 22, 2025, with the breach fully contained by 11:00 AM on August 25, 2025.

The cybercriminal responsible was identified as the “Play” ransomware group, a known international cybercrime organization specializing in ransomware attacks. The group’s access was confined to certain file directories containing employee and vendor-related data. Importantly, the investigation confirmed that ASMG’s email system, Microsoft Teams, and ERP platform—which hold the majority of the company’s HR, operations, and financial data—were not compromised.

Out of an abundance of caution, ASMG decided to notify all individuals and vendors whose information could have been stored in the affected directories. The company emphasized that, at this time, there is no evidence that any data has been misused.

Following the incident, ASMG took aggressive steps to strengthen its cybersecurity posture, including:

• Launching a 24/7 Security Operations Center (SOC) for continuous system monitoring;
• Enhancing firewall configurations and Microsoft 365 security settings; and
• Retaining third-party cybersecurity experts to conduct ongoing network testing and audits.

ASMG has also reported the incident to relevant authorities and continues to cooperate with federal and state regulators during their review of the event.

When Did This Breach Occur?

The unauthorized access occurred between August 22, 2025, and August 25, 2025, when the malicious activity was detected and contained.

What Information Was Breached?

According to ASMG’s investigation, the following types of sensitive personal and financial data may have been compromised:

• Name
• Social Security number
• Bank account numbers
• Medical information
• Contact information

The impacted individuals include employees and vendors who used their personal Social Security numbers as tax identification numbers.

What You Can Do

If you were notified that your personal information was involved in the ASMG data breach, it’s important to take steps to protect yourself from potential identity theft or fraud:

1. Enroll in Free Identity Protection Services – ASMG is offering 24 months of complimentary identity theft protection and credit monitoring through IDX, a ZeroFox company. This includes identity recovery assistance and insurance coverage for losses related to identity theft.
2. Monitor Financial Accounts – Regularly review your bank statements, credit reports, and medical billing statements for any unusual or unauthorized activity.
3. Place a Fraud Alert or Credit Freeze – Contact the major credit bureaus (Equifax, Experian, and TransUnion) to place a fraud alert or freeze your credit file, which helps prevent new accounts from being opened in your name.
4. Update Passwords and Security Settings – Change passwords for online accounts, especially those associated with financial institutions, and enable multi-factor authentication wherever possible.
5. Stay Vigilant – Be wary of phishing emails or phone calls that reference the ASMG breach. Scammers often use such events to trick individuals into revealing more information.

By taking these proactive steps, you can reduce your risk of identity theft and financial fraud.

File a Data Breach Lawsuit Against All States Materials Group