HackingManufacturingManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedAuthenticationCredentialsFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Parker-Hannifin Corporation

bd_17b4929739eac05a · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 14, 2022

Filed

May 12, 2022

To disclose

8 weeks

Affected

4,597state residents only

Linked

6 filings

Confidence

71%

Full breach record for Parker-Hannifin Corporation →2 incidents on file

Parker-Hannifin Corporation reported unauthorized access to IT systems between March 11-14, 2022, detected on March 14, 2022. The incident affected 4,597 Washington residents, including current/former employees and dependents. Compromised data included names, SSNs, DOBs, driver's licenses, passport numbers, financial account info, and usernames/passwords. A small subset had PHI (claims, treatment info). Parker engaged forensic investigators, notified law enforcement, and offered 2 years of Experian identity protection.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days

discovery → filing · 8 weeks / 59 days

Mar 11, 2022

Begins

Mar 14, 2022

Discovered

May 12, 2022

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_2e4e8437a11d82df2022-05-12Verified
Montana State AGbd_6832cd8e536a68202022-05-12Verified
California State AGbd_6b507e9d58c8d6b62022-05-12Verified
South Carolina State AGbd_8a3005f04acf903e2022-05-12Verified

Show 1 more filing ↓

Massachusetts State AGbd_8ddc31e707d319132022-05-12Verified

Name: Parker-Hannifin Corporation
norm: parker hannifin

Name: Parker-Hannifin Corporation
norm: parker hannifin
Industry: Manufacturingllm

Discovered: Mar 14, 2022
Breach occurred: Mar 11, 2022 – Mar 14, 2022
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 12, 2022
Affected individuals: 4,597state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentialsPHIHealth (basic)
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberPassport numberHealth insurance IDMedical informationUsername + passwordDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Washington Attorney General
Initial access: valid_credentials

During the incident: Activated its incident response protocols
Shutting down certain systems
Launched an investigation with the assistance of a forensic investigation firm
Notified and is working with law enforcement authorities
Changes made: Offering notified individuals complimentary, two-year memberships to identity theft protection services through Experian
Established a dedicated, toll-free incident response line
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGMay 12 · first

Montana State AGMay 12 · first

California State AGMay 12 · first

South Carolina State AGMay 12 · first

Massachusetts State AGMay 12 · first

Washington State AGMay 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA9874.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2022
Raw hash: 79c12a0d7839c14839436f7430503c6a7392c1386cc998d86e1ea5ecd92f7a84

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityParker-Hannifin Corporation

Victim entityParker-Hannifin Corporation

Incidentdiscovered Mar 14, 2022

Stated responseActivated its incident response protocols

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com