Social EngineeringOtherPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Willingham Welding Solutions, Inc

bd_3e6ec142e80b60aa · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 2, 2023

Filed

Sep 29, 2023

To disclose

13 weeks

Affected

1state residents only

Linked

2 filings

Confidence

65%

Full breach record for Willingham Welding Solutions, Inc →

Willingham Welding Solutions dba Gas Innovations notified Montana residents of a cybersecurity incident where unauthorized third parties accessed employee email accounts between May 7 and July 2, 2023. The incident involved phishing leading to credential compromise. Personal information was potentially accessed. The company engaged law enforcement and forensic responders, secured accounts, and offered 24 months of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 56 days

discovery → filing · 13 weeks / 89 days

May 7, 2023

Begins

Jul 2, 2023

Discovered

Sep 29, 2023

Filed

vs. sector median

+7 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_d15c81f9fbd57abe2023-09-29Verified

Name: Willingham Welding Solutions, Inc
norm: willingham welding

Name: Willingham Welding Solutions, Inc
norm: willingham welding
Also named: Willingham Welding Solutions, Incdba oflegal entity
Gas Innovationsdba oftrade name
Industry: Otherllm

Discovered: Jul 2, 2023
Breach occurred: May 7, 2023 – Jul 2, 2023
Undetected for: 56 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: contacted federal law enforcement
Initial access: phishing_link

During the incident: Contacted federal law enforcement
Engaged outside cybersecurity incident responders to investigate
Promptly took steps to secure the affected email accounts and our company email systems as a whole
Put in place additional safeguards to prevent a similar incident from occurring in the future
Offering complimentary access to Experian IdentityWorks for 24 months
Changes made: Put in place additional safeguards to prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(89 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 29 · first

Montana State AGSep 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-738.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 29, 2023
Raw hash: dd30cb298dfdced0a4c06bf13094a30cdc7dcf1064775a0a525efefe115c3549

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWillingham Welding Solutions, Inc

Victim entityWillingham Welding Solutions, Inc

Incidentdiscovered Jul 2, 2023

Stated responseContacted federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov