WESTINGHOUSE AIR BRAKE TECHNOLOGIES CORP

Wabtec Corporation experienced a cyber incident where malware was introduced into systems as early as March 15, 2022. The company became aware of unusual activity on June 26, 2022. Forensic investigation revealed unauthorized access and data exfiltration, with some data later posted to a threat actor's leak site. Affected individuals' information included names and potentially Social Security numbers, credit/debit card numbers, or bank account numbers. Wabtec engaged cybersecurity firms, notified the FBI, implemented additional safeguards, and offered 24 months of credit monitoring.