HackingManufacturingManufacturingTargetedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)EmploymentMediumActive

Meyer Corporation

bd_2b872baf5334e545 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2021

Filed

Feb 15, 2022

To disclose

11 weeks

Affected

4state residents only

Linked

7 filings

Confidence

64%

Full breach record for Meyer Corporation →

Meyer Corporation, U.S. notified Montana employees of a cybersecurity attack on or around October 25, 2021. Unauthorized access to employee records was identified on December 1, 2021. Data potentially accessed includes names, SSNs, DOBs, medical info, and government IDs. No evidence of actual access confirmed. 2-year identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 113 days

Oct 25, 2021

Begins

Oct 25, 2021

Discovered

Feb 15, 2022

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_069bf6aa8fa282532021-11-07 · +100dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_af0e161e02f463c92022-02-15Verified by operator
New Hampshire State AGbd_0fafffc18815c2272022-02-18 · +3dVerified
Maine State AGbd_1c7b98b318a932282022-02-18 · +3dVerified
Massachusetts State AGbd_a79ce84802b187ab2022-02-18 · +3dVerified by operator

Show 1 more filing ↓up to 3d gap

California State AGbd_e869c91ebee8530d2022-02-18 · +3dVerified

Name: Meyer Corporation
norm: meyer

Name: Meyer Corporation
norm: meyer
Industry: Manufacturingllm

Discovered: Oct 25, 2021
Breach occurred: Oct 25, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 15, 2022
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Employment
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External

During the incident: Initiated an investigation with the assistance of cybersecurity experts, including third-party forensic professionals
Providing free identity protection services for 2 years
Enhanced security controls
Changes made: Enhanced security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGFeb 15 · first

Montana State AGFeb 15 · first · this page

New Hampshire State AG+3d

Maine State AG+3d

Massachusetts State AG+3d

California State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2022
Raw hash: c0ccd6fe9bfd851733dde6cb1f975ab56ab34ea054943e1574f4f169ee38cbd7

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityMeyer Corporation

Victim entityMeyer Corporation

Incidentdiscovered Oct 25, 2021

Stated responseInitiated an investigation with the assistance of cybersecurity experts, including third-party forensic professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov