MalwareManufacturingManufacturingRansomwareCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDHighContained

Performance Friction Corporation

bd_58f1b85a934a3e05 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 17, 2022

Filed

May 19, 2023

To disclose

22 weeks

Affected

1,111state residents only

Linked

2 filings

Confidence

64%

Full breach record for Performance Friction Corporation →

Performance Friction Corporation notified South Carolina residents of a ransomware incident occurring on December 17, 2022. Unauthorized access resulted in the potential acquisition of employee PII, including names, addresses, and Social Security Numbers. The company engaged law enforcement and forensic specialists, implemented MFA, and enhanced network monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due22 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 22 weeks / 153 days

Dec 17, 2022

Begins

Dec 17, 2022

Discovered

May 19, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_1c126c11bb8e730b2023-05-12 · +7dVerified

Name: Performance Friction Corporation
norm: performance friction

Name: Performance Friction Corporation
norm: performance friction
Industry: Manufacturingllm

Discovered: Dec 17, 2022
Breach occurred: Dec 17, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,111state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: engaged law enforcement

During the incident: Took immediate steps to secure our systems
Engaged law enforcement
Initiated an investigation with the assistance of a cybersecurity specialist
Changes made: Deployed new tools to monitor activity on our network
Implemented additional internal controls and safeguards
Implemented multi-factor authentication
Provided additional training to our system users
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(153 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMay 12 · first

South Carolina State AG+7d · this page

Pattern: first filing May 12 (IN), last May 19 (SC) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2023/PerformanceFriction.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 19, 2023
Raw hash: 73c6833c0f761f362bc5c3180dd4c331eecfe391c4153352a912d7a9b00522ca

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPerformance Friction Corporation

Victim entityPerformance Friction Corporation

Incidentdiscovered Dec 17, 2022

Stated responseTook immediate steps to secure our systems

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov