MalwareManufacturingManufacturingRansomwareRansom DemandedData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowActive

WARRIOR MET COAL, INC.

bd_4378636ddfffb12b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 29, 2023

Filed

Dec 13, 2023

To disclose

20 weeks

Affected

10state residents only

Linked

4 filings

Confidence

66%

Full breach record for WARRIOR MET COAL, INC. →

Warrior Met Coal, Inc. notified individuals of a July 29, 2023 security incident where sophisticated malware accessed systems and exfiltrated personal information to extort payment. The company took systems offline, notified law enforcement, and engaged cybersecurity experts. Affected data likely includes names and contact info. The company offers complimentary credit monitoring via Experian. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Jul 29, 2023

Begins

Jul 29, 2023

Discovered

Dec 13, 2023

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_54fadf9b54d9ff212023-12-13Verified
Maine State AGbd_70dc7765fe9266b82023-12-13Verified
Vermont State AGbd_191319968fbd909b2023-12-12 · +1dVerified

Name: WARRIOR MET COAL, INC.
norm: warrior met coal

Name: WARRIOR MET COAL, INC.
norm: warrior met coal
Industry: Manufacturingllm

Discovered: Jul 29, 2023
Breach occurred: Jul 29, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 12, 2023
Affected individuals: 10state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement

During the incident: Took systems offline
Notified law enforcement
Engaged cybersecurity experts to investigate
Offered complimentary credit and identity protection services through Experian
Changes made: Continuing to work with external cybersecurity experts to investigate
Strengthening computer network
Monitoring the dark web for information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGDec 12 · first

Massachusetts State AG+1d

Maine State AG+1d

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-945.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 13, 2023
Raw hash: ef0e0af389186605a381ef8c84a3d2ba23d7b2de45313a53faa86aac340799ef

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWARRIOR MET COAL, INC.

Victim entityWARRIOR MET COAL, INC.

Incidentdiscovered Jul 29, 2023

Stated responseTook systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov