Wabtec Corporation
bd_609e558e001a5da5 · schema v1 · pii pii-v1
Wabtec Corporation experienced a cyber incident where malware was introduced into systems as early as March 15, 2022. The company became aware of unusual activity on June 26, 2022. Forensic investigation revealed unauthorized access and data exfiltration, with some data later posted to a threat actor's leak site. Affected individuals' information included names and potentially Social Security numbers, credit/debit card numbers, or bank account numbers. Wabtec engaged cybersecurity firms, notified the FBI, implemented additional safeguards, and offered 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 15, 2022
Begins
Jun 26, 2022
Discovered
Jan 4, 2024
Filed
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitelockbit_3bd_f415bb095f594df02022-08-18 · +504dCandidate
Regulatory filings (6) · sorted by filing gap
- Illinois State AGbd_5c8d553efe1c93cd2024-01-01 · +3dVerified
- Indiana State AGbd_27cc78988cc3447f2022-12-30 · +370dCandidate
- Montana State AGbd_32b50f63129f43892022-12-30 · +370dVerified
- New Hampshire State AGbd_47d232164f93649f2022-12-30 · +370dVerified
Show 2 more filings ↓Show fewer ↑up to 370d gap
- Maine State AGbd_5d570096087bd9d42022-12-30 · +370dVerified
- Massachusetts State AGbd_e328767b0ce8a4df2022-12-30 · +370dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Dec 30 (IN), last Jan 4 (CA) — a 370-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.