HackingManufacturingHealthcareManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsPHIHealth (basic)MediumContained

PARKER-HANNIFIN CORPORATION

bd_6832cd8e536a6820 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 14, 2022

Filed

May 12, 2022

To disclose

8 weeks

Affected

85state residents only

Linked

6 filings

Confidence

66%

Full breach record for PARKER-HANNIFIN CORPORATION →3 incidents on file

Parker-Hannifin Corporation notified Montana and other states of a March 2022 data breach. Unauthorized access occurred March 11-14, 2022. Affected data included names, SSNs, DOBs, driver's licenses, passport numbers, financial account info, and credentials for employees and affiliates. Health plan enrollment data was also potentially accessed. The company engaged forensic investigators, notified law enforcement, and offered two years of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 8 weeks / 59 days

Mar 11, 2022

Begins

Mar 14, 2022

Discovered

May 12, 2022

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Washington State AGbd_17b4929739eac05a2022-05-12Candidate
Oregon State AGbd_2e4e8437a11d82df2022-05-12Verified
California State AGbd_6b507e9d58c8d6b62022-05-12Verified
South Carolina State AGbd_8a3005f04acf903e2022-05-12Verified

Show 1 more filing ↓

Massachusetts State AGbd_8ddc31e707d319132022-05-12Verified

Name: PARKER-HANNIFIN CORPORATION
norm: parker hannifin

Name: PARKER-HANNIFIN CORPORATION
norm: parker hannifin
Industry: ManufacturingllmHealthcarellm

Discovered: Mar 14, 2022
Breach occurred: Mar 11, 2022 – Mar 14, 2022
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 85state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentialsPHIHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notified and are working with law enforcement authorities
Initial access: valid_credentials

During the incident: Activated our incident response protocols
Shutting down certain systems
Launched an investigation with the assistance of a forensic investigation firm and other third-party cyber security and incident response professionals
Notified and are working with law enforcement authorities
Changes made: Offering you a complimentary two-year membership in Experian’s IdentityWorksSM
Continuing to take steps to help safeguard our systems and data against the rapidly evolving threats to company information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGMay 12 · first

Oregon State AGMay 12 · first

California State AGMay 12 · first

South Carolina State AGMay 12 · first

Massachusetts State AGMay 12 · first

Montana State AGMay 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Parker-Hannifin-Corporation-Consumer-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2022
Raw hash: f9ad3926f619b4937f451073bd3a7548f12d8f1550c529b50dbeea0630ea58b2

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPARKER-HANNIFIN CORPORATION

Victim entityPARKER-HANNIFIN CORPORATION

Incidentdiscovered Mar 14, 2022

Stated responseActivated our incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov