HackingManufacturingManufacturingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

MUELLER WATER PRODUCTS, INC.

bd_3bea66fd07f7a5d5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 31, 2023

Filed

Aug 16, 2024

To disclose

41 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for MUELLER WATER PRODUCTS, INC. →4 incidents on file

Mueller Water Products, Inc. disclosed a data breach occurring October 25-26, 2023, where unauthorized actors copied files containing personal information. The company discovered the incident in late October 2023, confirmed affected data in July 2024, and notified individuals and regulators in August 2024. Affected data includes names and government IDs. Remediation included system security enhancements and credit monitoring services for affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 41 weeks / 290 days

Oct 25, 2023

Begins

Oct 31, 2023

Discovered

Jul 16, 2024

Scope determined

Aug 16, 2024

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_3bee7647163f4bbe2024-08-16Verified
Montana State AGbd_b1ba08e6704a0b9b2024-08-16Candidate
Vermont State AGbd_de860cc7b51d705d2024-08-16Verified
Massachusetts State AGbd_e3661b54ad95f2a02024-08-16Verified

Name: MUELLER WATER PRODUCTS, INC.
norm: mueller water products

Name: MUELLER WATER PRODUCTS, INC.
norm: mueller water products
Industry: Manufacturingllm

Discovered: Oct 31, 2023
Breach occurred: Oct 25, 2023 – Oct 26, 2023
Undetected for: 6 daysoccurrence → discovery
Materiality determined: Jul 16, 2024
Notification sent: Aug 16, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementProviding written notice of this incident to relevant state and federal regulators
Initial access: valid_credentials

During the incident: Conducted a thorough investigation
Implemented technology enhancements to further ensure the security of its network
Notified federal law enforcement regarding the event
Provided current employees who were employed at the time of the incident with access to credit monitoring services
Providing access to credit monitoring services for all individuals to whom it is providing notification through Equifax
Providing individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies
Changes made: Enhanced the security of its systems
Reviewed existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(290 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGAug 16 · first

Montana State AGAug 16 · first

Vermont State AGAug 16 · first

Massachusetts State AGAug 16 · first

New Hampshire State AGAug 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mueller-water-products-20240816.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2024
Raw hash: 2a732b9720999211b00dae523373a47b0b60826ea7993a3ab88011407cd08bbb

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMUELLER WATER PRODUCTS, INC.

Victim entityMUELLER WATER PRODUCTS, INC.

Incidentdiscovered Oct 31, 2023

Stated responseConducted a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov