MalwareRansomwareCapture Stored DataData ExfiltratedData PublishedRansom DemandedCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
WESTINGHOUSE AIR BRAKE TECHNOLOGIES CORP
bd_47d232164f93649f · schema v1 · pii pii-v1
Full breach record for WESTINGHOUSE AIR BRAKE TECHNOLOGIES CORP →Wabtec Corporation reported a ransomware incident affecting 3 New Hampshire residents. Malware was introduced as early as March 15, 2022, with discovery on June 26, 2022. Attackers exfiltrated and published data including names and SSNs. Wabtec engaged forensic investigators, notified the FBI, and offered 24 months of credit monitoring.
Leak gap clock⏱ Leak >90d27 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 134 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_32b50f63129f4389Montana State AGfiled 2022-12-30Candidate
- bd_5d570096087bd9d4Maine State AGfiled 2022-12-30Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wabtec-corporation-20221230.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2022
- Raw hash
- ca5475530301a74b1f3b599a58dd66edd3b846f6556193a4b75b3f499a8df3c3
Reporting entity
- Name
- WESTINGHOUSE AIR BRAKE TECHNOLOGIES CORPnorm: westinghouse air brake
- Domain
- wabteccorp.com
Victim entity
- Name
- WESTINGHOUSE AIR BRAKE TECHNOLOGIES CORPnorm: westinghouse air brake
- Domain
- wabteccorp.com
Incident
- Discovered
- Jun 26, 2022
- Materiality determined
- Nov 23, 2022
- Notification sent
- Dec 30, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1074 Data Staged
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of JusticeNotified the Federal Bureau of Investigation
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.