CARPENTER CO.

Carpenter Co experienced a ransomware incident on March 18, 2021, impacting IT systems. The company did not pay the ransom. Forensic investigation confirmed on May 24, 2021, that threat actors accessed personal information of employees and contractors, including SSNs, DOBs, financial account details, and health information. The company contained the malware, locked out unauthorized users, and engaged forensic experts. Remediation included network monitoring and active directory hardening. Identity monitoring was provided via Kroll.