HackingManufacturingManufacturingDelayed DiscoveryPIIIdentity (basic)Government IDMediumContained

Drilling Tools International Inc

bd_627dfcee219f9484 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 19, 2023

Filed

May 30, 2024

To disclose

23 weeks

Affected

1state residents only

Confidence

65%

Full breach record for Drilling Tools International Inc →

Drilling Tools International, Inc. notified Montana residents of a cybersecurity incident where an unknown third party accessed systems between Nov 20 and Dec 19, 2023. DTI detected the issue on Dec 19, 2023. HR files containing sensitive personal info of workforce members were impacted. DTI engaged legal and cybersecurity experts, disconnected systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 29 days

discovery → filing · 23 weeks / 163 days

Nov 20, 2023

Begins

Dec 19, 2023

Discovered

May 30, 2024

Filed

vs. sector median

+13 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Drilling Tools International Inc
norm: drilling tools

Name: Drilling Tools International Inc
norm: drilling tools
Industry: Manufacturingllm

Discovered: Dec 19, 2023
Breach occurred: Nov 20, 2023 – Dec 19, 2023
Undetected for: 29 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 29, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Proactively disconnect our systems to contain the potential issue
Engaging legal counsel and cybersecurity experts to help undertake a thorough investigation
Implemented additional safeguards and technical security measures
Secured Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Implemented additional safeguards and technical security measures to further protect and monitor our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(163 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1440.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 30, 2024
Raw hash: 5c87cfa5b8653c36f2a9ef09ae90e2c70f6e42cee3feb6f55491180d7cb65fa8

Reporting entityDrilling Tools International Inc

Victim entityDrilling Tools International Inc

Incidentdiscovered Dec 19, 2023

Stated responseProactively disconnect our systems to contain the potential issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov