MalwareOtherRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsHealth (basic)BiometricMediumContained

AMERICOLD REALTY TRUST, INC

bd_304b701808bb4764 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 16, 2020

Filed

Mar 5, 2021

To disclose

16 weeks

Affected

63state residents only

Linked

11 filings

Confidence

67%

Full breach record for AMERICOLD REALTY TRUST, INC →3 incidents on file

Americold Realty Trust experienced a ransomware incident on November 16, 2020. The company shut down systems and restored from backups. Personal information, potentially including SSNs, financial account numbers, and health data, for 63 New Hampshire residents was in files that may have been accessed. The company offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 109 days

Nov 16, 2020

Discovered

Mar 5, 2021

Filed

vs. sector median

+8 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_1ac6baa42406e64a2021-03-04 · +1dVerified
Montana State AGbd_7312a6c2c59a42522021-03-04 · +1dVerified
Oregon State AGbd_7a710c8c46f7a6062021-03-04 · +1dVerified
Maine State AGbd_8bef916e42a8ee2c2021-03-04 · +1dVerified

Show 6 more filings ↓up to 63d gap

California State AGbd_9e7111b289983e7f2021-03-04 · +1dVerified
Washington State AGbd_a34234edbe38ad0a2021-03-04 · +1dVerified
Indiana State AGbd_f509be79f21262932021-03-04 · +1dVerified
California State AGbd_97b9991f957989cb2021-03-30 · +25dVerified
Maine State AGbd_b5e51d5932a4c8862021-04-12 · +38dVerified
Illinois State AGbd_83623693d978b52d2021-01-01 · +63dCandidate

Name: AMERICOLD REALTY TRUST, INC
norm: americold realty
Domain: americold.com

Name: AMERICOLD REALTY TRUST, INC
norm: americold realty
Domain: americold.com
Industry: Otherllm

Discovered: Nov 16, 2020
Materiality determined: —
Notification sent: Mar 4, 2021
Affected individuals: 63state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentialsHealth (basic)Biometric
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified New Hampshire Department of Justice

During the incident: Engaged a third-party cybersecurity firm to assist with the investigation
Preemptively shut down its systems to contain the incident
Undertook a secure, managed restoration from backup systems
Notified law enforcement and has been cooperating with their investigation
Sent letters to all current associates in the United States offering complimentary identity theft detection and resolution services
Established a call center to answer consumer questions
Changes made: Updated administrative and technical safeguards to strengthen and enhance the security of systems in its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(109 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+62d

Montana State AG+62d

Oregon State AG+62d

Maine State AG+62d

California State AG+62d

Washington State AG+62d

Indiana State AG+62d

New Hampshire State AG+63d · this page

California State AG+88d

Maine State AG+101d

Pattern: first filing Jan 1 (IL), last Apr 12 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/americold-realty-trust-20210305.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2021
Raw hash: 0d2db603e4f40d7607c6f680ed0be9494f03174a7b7d9e22f55ee15639e3308b

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAMERICOLD REALTY TRUST, INC

Victim entityAMERICOLD REALTY TRUST, INC

Incidentdiscovered Nov 16, 2020

Stated responseEngaged a third-party cybersecurity firm to assist with the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov