HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

QUAKER WINDOW PRODUCTS CO.

bd_45f3a286505a6e5d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 25, 2023

Filed

Mar 12, 2024

To disclose

15 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for QUAKER WINDOW PRODUCTS CO. →

Quaker Window Products, Co. notified Montana residents of a November 25, 2023 security incident where an unauthorized actor accessed personal data including names, addresses, and Social Security numbers. The company engaged cybersecurity experts, reported to federal law enforcement, and offered 12 months of credit monitoring via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 108 days

Nov 25, 2023

Begins

Nov 25, 2023

Discovered

Mar 12, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_35f40a34211051432024-03-13 · +1dVerified
Indiana State AGbd_91fe061a58fa32dd2024-01-17 · +55dVerified
Maine State AGbd_616da2723b1aa19c2024-01-05 · +67dCandidate

Name: QUAKER WINDOW PRODUCTS CO.
norm: quaker window products

Name: QUAKER WINDOW PRODUCTS CO.
norm: quaker window products
Industry: Manufacturingllm

Discovered: Nov 25, 2023
Breach occurred: Nov 25, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 12, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this incident to federal law enforcement
Initial access: valid_credentials

During the incident: Engaged cybersecurity experts to assist with the process
Reported this incident to federal law enforcement
Offering free identity protection services through IDX
Implemented additional security measures
Changes made: Implemented additional security measures to minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(108 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGJan 5 · first

Indiana State AG+12d

Montana State AG+67d · this page

New Hampshire State AG+68d

Pattern: first filing Jan 5 (ME), last Mar 13 (NH) — a 68-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1182.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2024
Raw hash: 70c0baae4339217a3a6edb46eb18877c76ef55d1c2124f7d8bc69ab34249d911

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityQUAKER WINDOW PRODUCTS CO.

Victim entityQUAKER WINDOW PRODUCTS CO.

Incidentdiscovered Nov 25, 2023

Stated responseEngaged cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov