FEDERALMalwareRetail & ConsumerManufacturingManufacturingRansomwareData EncryptedLowResolved

HANESBRANDS INC.

bd_35df2f70110cc48e · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 16, 2024

To disclose

—

Affected

Not disclosed

Confidence

74%

Full breach record for HANESBRANDS INC. →2 incidents on file

Hanesbrands Inc. 10-K Item 1C cybersecurity disclosure references a previously announced ransomware attack from May 31, 2022. Other than this incident, the company states no cybersecurity threats have materially affected operations. The filing describes the company's enterprise cybersecurity program, third-party vendor risk management, governance structure, and management oversight, but does not provide new details on affected individuals, data types, or threat actor attribution for the 2022 ransomware event.

J jump to incidentP pin to compareR raw source

Incident timeline

May 31, 2022

Begins

Feb 16, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.No incident reportedView incident

Name: HANESBRANDS INC.
norm: hanesbrands

Name: HANESBRANDS INC.
norm: hanesbrands
Industry: Retail & ConsumerllmManufacturingllm

Discovered: —
Breach occurred: May 31, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

Changes made: Adopting and periodically reviewing and updating information security and privacy policies and procedures
Conducting targeted audits and penetration tests throughout the year, using both internal and external resources
Conducting security maturity posture assessments, including engaging an industry-leading, nationally-known third party to independently evaluate our information security maturity on a regular basis
Utilizing industry-standard technologies, processes, and capabilities designed to protect our systems and data and detect potential suspicious activity
Adopting a vendor risk management program, which includes cybersecurity and data privacy audits
Providing security and privacy training and awareness to our employees
Conducting periodic phishing simulations to test our employees' responses to suspicious emails
Maintaining cyber liability insurance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1359841/000135984124000010/hbi-20231230.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 16, 2024
Raw hash: 08a1e3d2c8f7700bf78cf62d37819ccd81ec4951df54773a03a0c1e61faf98bc

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.9 MB

Download View at source

Reporting entityHANESBRANDS INC.

Victim entityHANESBRANDS INC.

IncidentRansomware

Stated responseAdopting and periodically reviewing and updating information security and privacy policies and procedures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing