MalwareRansomwareRansom DemandedData EncryptedPIIIDENTITY_BASICLowContained
WARRIOR MET COAL, INC.
bd_191319968fbd909b · schema v1 · pii pii-v1
Full breach record for WARRIOR MET COAL, INC. →Warrior Met Coal, Inc. notified Vermont consumers of a July 29, 2023 security incident involving sophisticated malware that evaded antivirus defenses. The attacker targeted systems to extort payment, accessing files containing personal information. The company took systems offline, engaged experts, recovered files, and offered free credit monitoring. No actual misuse was known at the time of notice.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4378636ddfffb12bMontana State AGfiled 2023-12-13(1d gap)Candidate
- bd_70dc7765fe9266b8Maine State AGfiled 2023-12-13(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-12-warrior-met-coal-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2023
- Raw hash
- bf9218f4b769856b1f68fa9c88dcecd9027d5a89184a87ec417a02a2379f6a25
Reporting entity
- Name
- WARRIOR MET COAL, INC.norm: warrior met coal
Victim entity
- Name
- WARRIOR MET COAL, INC.norm: warrior met coal
Incident
- Discovered
- Jul 29, 2023
- Materiality determined
- —
- Notification sent
- Dec 12, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 19 weeks(136 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.