HackingManufacturingManufacturingData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

SNAP-ON INCORPORATED

bd_24e958da6d5a1b80 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2022

Filed

Apr 8, 2022

To disclose

5 weeks

Affected

226state residents only

Linked

10 filings

Confidence

66%

Full breach record for SNAP-ON INCORPORATED →

Snap-on Incorporated detected unusual activity in early March 2022 and contained the incident by taking network connections offline. An investigation revealed that an unauthorized third party exfiltrated internal corporate files containing personal information (names, SSNs, tax IDs, driver's licenses/passports) of employees and franchisees between March 1 and March 3, 2022. 226 New Hampshire residents were notified on April 7, 2022, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 38 days

Mar 1, 2022

Begins

Mar 1, 2022

Discovered

Apr 8, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_a519fc8ef0091a272022-04-10 · +2dVerified by operator

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_4cfb804700e45add2022-04-07 · +1dVerified
Maine State AGbd_513f6c7ab841506c2022-04-07 · +1dVerified
California State AGbd_75fcdb24d69d532b2022-04-07 · +1dVerified
Montana State AGbd_f5815b56cbb965e52022-04-07 · +1dVerified

Show 4 more filings ↓up to 97d gap

Massachusetts State AGbd_a309b89fc7a53cce2022-04-13 · +5dVerified
Washington State AGbd_f2d77bd4c6ff93132022-04-14 · +6dVerified
Oregon State AGbd_9938b1400eebc4f52022-04-20 · +12dVerified
Illinois State AGbd_22542ab9d295482d2022-01-01 · +97dCandidate

Name: SNAP-ON INCORPORATED
norm: snap on
Domain: snap-on.com

Name: SNAP-ON INCORPORATED
norm: snap on
Domain: snap-on.com
Industry: Manufacturingllm

Discovered: Mar 1, 2022
Breach occurred: Mar 1, 2022 – Mar 3, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 7, 2022
Affected individuals: 226state-resident count only
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Took down its network connections as a precautionary measure
Launched an investigation with assistance from a leading external forensics firm
Notified the Federal Bureau of Investigation
Quarantined global assets
Heightened monitoring technology on servers and workstations across all environments
Enacted a rigorous vetting process for bringing systems back online
Allowed network access for only those machines that were confirmed to be uncompromised
Strengthened authentication protocols
Changes made: Implementing additional measures intended to further strengthen its overall security posture moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+96d

Maine State AG+96d

California State AG+96d

Montana State AG+96d

New Hampshire State AG+97d · this page

Massachusetts State AG+102d

Washington State AG+103d

Oregon State AG+109d

Pattern: first filing Jan 1 (IL), last Apr 20 (OR) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/snap-on-20220408.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2022
Raw hash: 7dccaf6352f467846c47cf5f542349900bf32b27d418e52dc1ffd15dcf15b0f5

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entitySNAP-ON INCORPORATED

Victim entitySNAP-ON INCORPORATED

Incidentdiscovered Mar 1, 2022

Stated responseTook down its network connections as a precautionary measure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov