MalwareManufacturingManufacturingRansomwareData EncryptedEmployee Data InvolvedPIIPHIIdentity (basic)Government IDFinancial accountEmploymentHealth (basic)MediumContained

THYSSENKRUPP MATERIALS, LLC

bd_0d55ddad5c5ffc1f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 26, 2021

To disclose

—

Affected

Not disclosed

Linked

9 filings

Confidence

75%

Full breach record for THYSSENKRUPP MATERIALS, LLC →3 incidents on file

On December 28, 2020, thyssenkrupp Materials (US and Canada) suffered a ransomware attack that encrypted servers and workstations. The threat actor had access to HR data including employee names, addresses, SSNs, birthdates, direct deposit/payroll information, health information, and contact details. The company isolated the attack, hardened systems, and offered 24-month credit monitoring to affected current and former employees.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 28, 2020

Begins

Jan 26, 2021

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_4a1b9c95fe9e5cb72021-01-26Verified
Maine State AGbd_af8ad10566b277db2021-01-26Verified
Maine State AGbd_cf2ab16d6436f1592021-01-26Candidate
Washington State AGbd_d28b0ce8a0a5bb312021-01-26Verified

Show 4 more filings ↓up to 25d gap

New Hampshire State AGbd_1a8b79f8b3799ed02021-01-27 · +1dVerified
Maine State AGbd_1441b6d53b6bb3002021-01-22 · +4dCandidate
Indiana State AGbd_258633cf6d11adc22021-01-19 · +7dVerified
Illinois State AGbd_15c210d8191b7af22021-01-01 · +25dVerified

Name: THYSSENKRUPP MATERIALS, LLC
norm: thyssenkrupp materials

Name: THYSSENKRUPP MATERIALS, LLC
norm: thyssenkrupp materials
Industry: Manufacturingllm

Discovered: —
Breach occurred: Dec 28, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIPHIIdentity (basic)Government IDFinancial accountEmploymentHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Took immediate action to investigate and isolate the attack and secure our IT environment
Arranged for employees to enroll in an online, three-bureau credit monitoring service (myTrueIdentity) for two years provided by TransUnion Interactive
Set up toll-free hotline ([REDACTED-PHONE]) to answer employee questions about the incident
Changes made: Increasing the monitoring of our networks
Further improving access controls
Hardening our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+18d

Maine State AG+21d

Massachusetts State AG+25d

Maine State AG+25d

Washington State AG+25d

California State AG+25d · this page

New Hampshire State AG+26d

Pattern: first filing Jan 1 (IL), last Jan 27 (NH) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-537462
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2021
Raw hash: 8cad27306d88e56e67f48a6175bb858a05c241194e131c9495efaa7b106b937f

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityTHYSSENKRUPP MATERIALS, LLC

Victim entityTHYSSENKRUPP MATERIALS, LLC

IncidentRansomware

Stated responseTook immediate action to investigate and isolate the attack and secure our IT environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov