DisclosureLens
HackingManufacturingManufacturingData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumResolved

Navistar, Inc.

bd_396e87c59bc40b92 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 20, 2021

Filed

Sep 21, 2021

To disclose

18 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

66%
Full breach record for Navistar, Inc.2 incidents on file

Navistar, Inc. disclosed a security incident where an unauthorized third party accessed and extracted data from its IT system prior to May 20, 2021. The breach affected current and former employees and their dependents, exposing names, addresses, dates of birth, Social Security numbers, and health plan participation details including provider and prescription information. Navistar engaged cybersecurity experts, enhanced security protocols, and offered two years of credit monitoring.

Incident timeline

discovery → filing · 18 weeks / 124 days

May 20, 2021

Discovered

Sep 21, 2021

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 263d gap

Filing propagation · 8 filings · 7 states

View merged incident ↗
Illinois State AGJan 1 · first
Illinois State AGJan 1 · first
California State AG+263d · this page

Pattern: first filing Jan 1 (IL), last Sep 27 (NH) — a 269-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.