HackingManufacturingManufacturingVulnerability ExploitData EncryptedEmployee Data InvolvedGovernment IDIdentity (basic)Health (basic)Financial accountMediumContained

MATIV HOLDINGS, INC.

bd_5e2a7e2e29c0adef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 9, 2022

Filed

Oct 3, 2022

To disclose

12 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for MATIV HOLDINGS, INC. →

Mativ Holdings, Inc. (via legacy SWM and Scapa Group) disclosed a cybersecurity incident occurring June-July 2022. An unauthorized person blocked network access and potentially accessed employee and dependent data (DOB, limited medical, financial account numbers, SSN). Mativ disconnected networks, engaged forensic investigators, and offered 2 years of Equifax credit monitoring. Incident discovered July 9, 2022.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 38 days

discovery → filing · 12 weeks / 86 days

Jun 1, 2022

Begins

Jul 9, 2022

Discovered

Oct 3, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_446732b4951867822022-10-03Verified
Massachusetts State AGbd_77232dd2e2e413a02022-10-03Verified
Indiana State AGbd_96c1c61007a16f832022-10-03Verified

Name: MATIV HOLDINGS, INC.
norm: mativ holdings

Name: MATIV HOLDINGS, INC.
norm: mativ holdings
Industry: Manufacturingllm

Discovered: Jul 9, 2022
Breach occurred: Jun 1, 2022 – Jul 31, 2022
Undetected for: 38 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Date of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notice with Delaware Attorney General's Office
Initial access: exploit_public_facing

During the incident: Disconnected the legacy SWM and Scapa IT networks from the internet
Engaged a third-party security firm to assist with an investigation
Removed the unauthorized person from our systems
Eliminated the vulnerability that was used to gain access to our systems
Arranged to have Equifax provide you with two (2) years of complimentary credit monitoring and identity theft protection services
Changes made: Strengthened our systems
Eliminated the vulnerability that was used to gain access to our systems
Implement additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGOct 3 · first

Massachusetts State AGOct 3 · first

Indiana State AGOct 3 · first

Delaware State AGOct 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/10/Mativ-US-non-Massachusetts.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 3, 2022
Raw hash: 1213db5b672d8c69aef8ec4ac09937d859dc50fab45c53455920f79ee6ccf12a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMATIV HOLDINGS, INC.

Victim entityMATIV HOLDINGS, INC.

Incidentdiscovered Jul 9, 2022

Stated responseDisconnected the legacy SWM and Scapa IT networks from the internet

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov