MalwareRansomwareData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Westlake Hardware, Inc.
bd_02c7c44b560b146d · schema v1 · pii pii-v1
Full breach record for Westlake Hardware, Inc. →Westlake Hardware, Inc. reported a ransomware incident affecting 18,170 individuals, including 1 Maine resident. The breach occurred between August 21 and 30, 2020, involving the exfiltration of names and Social Security Numbers. The company notified consumers in February 2021 and provided 12 months of credit monitoring via TransUnion.
Maine clockDiscovered Aug 26, 2020 → Filed with AG Feb 10, 2021168d ✗ ME AG >90d24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_119ec99d5b01787aMontana State AGfiled 2021-02-10Verified
- bd_9a913dcdcabfb37cCalifornia State AGfiled 2021-02-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03c866fe-d2c7-489b-98a6-4a05354d1682.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 10, 2021
- Raw hash
- 341c4c633fb83cb1e98f66941efa0049ae0099100e14624bd928e9b2bbd7c87a
Reporting entity
- Name
- Westlake Hardware, Inc.norm: westlake hardware
- Domain
- westlakehardware.com
Victim entity
- Name
- Westlake Hardware, Inc.norm: westlake hardware
- Domain
- westlakehardware.com
Incident
- Discovered
- Aug 26, 2020
- Materiality determined
- —
- Notification sent
- Feb 10, 2021
- Affected individuals
- 18,170
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- ME AG >90d · 168dME resident >60d · 168d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 26, 2020→ Filed with AG: Feb 10, 2021168d 90 days ME AG >90d Maine Discovered: Aug 26, 2020→ Notified: Feb 10, 2021168d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.