MalwareEnergy & UtilitiesUtilitiesRansomwareCapture Stored DataRansom DemandedData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

WARRIOR MET COAL, INC.

bd_191319968fbd909b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 29, 2023

Filed

Dec 12, 2023

To disclose

19 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

68%

Full breach record for WARRIOR MET COAL, INC. →

Warrior Met Coal, Inc. experienced a security incident on July 29, 2023, involving sophisticated malware that evaded detection. A criminal threat actor accessed computer systems and acquired files containing personal information in an effort to extort a financial payment. The company took systems offline, notified law enforcement, and engaged cybersecurity experts. Files were recovered. Affected individuals in multiple states, including Vermont, are offered complimentary identity protection services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday19 weeks discovery → filing

Incident timeline

discovery → filing · 19 weeks / 136 days

Jul 29, 2023

Discovered

Dec 12, 2023

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_4378636ddfffb12b2023-12-13 · +1dCandidate
Massachusetts State AGbd_54fadf9b54d9ff212023-12-13 · +1dVerified
Maine State AGbd_70dc7765fe9266b82023-12-13 · +1dVerified

Name: WARRIOR MET COAL, INC.
norm: warrior met coal

Name: WARRIOR MET COAL, INC.
norm: warrior met coal
Industry: Energy & Utilitiesllm

Discovered: Jul 29, 2023
Materiality determined: —
Notification sent: Dec 12, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement

During the incident: Took affected systems offline
Notified law enforcement
Engaged cybersecurity experts to investigate
Recovering the files
Monitoring the dark web for information that affects us
Offering complimentary identity protection services through Experian
Changes made: Strengthening computer network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(136 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGDec 12 · first · this page

Montana State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-12-12-warrior-met-coal-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2023
Raw hash: bf9218f4b769856b1f68fa9c88dcecd9027d5a89184a87ec417a02a2379f6a25

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWARRIOR MET COAL, INC.

Victim entityWARRIOR MET COAL, INC.

Incidentdiscovered Jul 29, 2023

Stated responseTook affected systems offline

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov