DisclosureLens
HackingManufacturingManufacturingStolen CredentialsCapture Stored DataData ExfiltratedDelayed DiscoveryIdentity (basic)Government IDHealth (basic)MediumContained

Navistar, Inc.

bd_091e66dd53974f08 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 20, 2021

Filed

Sep 21, 2021

To disclose

18 weeks

Affected

32state residents only

Linked

9 filings

Confidence

66%
Full breach record for Navistar, Inc.2 incidents on file

Navistar, Inc. issued a supplemental breach notification to Montana residents regarding a May 2021 unauthorized access of its IT system. The incident affected current and former employees and their dependents, exposing PII (name, address, SSN, DOB) and health plan data. Navistar engaged cybersecurity experts and provided two years of credit monitoring.

Incident timeline

discovery → filing · 18 weeks / 124 days

May 20, 2021

Discovered

Sep 21, 2021

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 263d gap

Filing propagation · 8 filings · 7 states

View merged incident ↗
Illinois State AGJan 1 · first
Illinois State AGJan 1 · first
Montana State AG+263d · this page

Pattern: first filing Jan 1 (IL), last Sep 27 (NH) — a 269-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.