HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
MUELLER WATER PRODUCTS, INC.
bd_3bea66fd07f7a5d5 · schema v1 · pii pii-v1
Full breach record for MUELLER WATER PRODUCTS, INC. →Mueller Water Products, Inc. disclosed a data breach occurring October 25-26, 2023, where unauthorized actors copied files containing personal information. The company discovered the incident in late October 2023, confirmed affected data in July 2024, and notified individuals and regulators in August 2024. Affected data includes names and government IDs. Remediation included system security enhancements and credit monitoring services for affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3bee7647163f4bbeIndiana State AGfiled 2024-08-16Verified
- bd_b1ba08e6704a0b9bMontana State AGfiled 2024-08-16Candidate
- bd_de860cc7b51d705dVermont State AGfiled 2024-08-16Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mueller-water-products-20240816.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2024
- Raw hash
- 2a732b9720999211b00dae523373a47b0b60826ea7993a3ab88011407cd08bbb
Reporting entity
- Name
- MUELLER WATER PRODUCTS, INC.norm: mueller water products
Victim entity
- Name
- MUELLER WATER PRODUCTS, INC.norm: mueller water products
Incident
- Discovered
- Oct 31, 2023
- Materiality determined
- Jul 16, 2024
- Notification sent
- Aug 16, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementProviding written notice of this incident to relevant state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 41 weeks(290 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.