HackingManufacturingManufacturingStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Willamette Falls Paper Company

bd_5116b130d4876a48 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 6, 2023

Filed

Oct 12, 2023

To disclose

27 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Willamette Falls Paper Company →

Willamette Falls Paper Company notified Montana residents of a data breach discovered on April 6, 2023. Unauthorized access resulted in the exfiltration of names, dates of birth, and Social Security numbers. The company engaged forensic experts, reported the incident to the FBI, and offered 12 months of credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 weeks / 189 days

Apr 6, 2023

Discovered

Oct 12, 2023

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_4e163e9c746bc07f2023-10-12Verified
Massachusetts State AGbd_91540297fe646a352023-10-12Verified
Oregon State AGbd_a775dd7270a4f5c62023-10-12Verified by operator

Name: Willamette Falls Paper Company
norm: willamette falls paper

Name: Willamette Falls Paper Company
norm: willamette falls paper
Industry: Manufacturingllm

Discovered: Apr 6, 2023
Materiality determined: —
Notification sent: Oct 12, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged cybersecurity experts to secure our network and restore our systems
Conducted an investigation
Engaged a third-party vendor to commence a comprehensive review of the affected data
Reported this incident to the Federal Bureau of Investigation
Changes made: Implemented additional security measures to further protect our network and minimize the risk of future incidents
Provided complimentary credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(189 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 12 · first

Massachusetts State AGOct 12 · first

Oregon State AGOct 12 · first

Montana State AGOct 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-765.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 12, 2023
Raw hash: 279e2452871594a96c28da8fdf224ab9171c519e67060dca22f63241709c0f40

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWillamette Falls Paper Company

Victim entityWillamette Falls Paper Company

Incidentdiscovered Apr 6, 2023

Stated responseEngaged cybersecurity experts to secure our network and restore our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov