HackingOtherStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

AMERICOLD REALTY TRUST, INC

bd_7312a6c2c59a4252 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 16, 2020

Filed

Mar 4, 2021

To disclose

15 weeks

Affected

62state residents only

Linked

11 filings

Confidence

66%

Full breach record for AMERICOLD REALTY TRUST, INC →3 incidents on file

Americold Realty Trust notified Montana residents of a data security incident discovered on November 16, 2020. Unauthorized access to files containing personal information (names, SSNs, DOBs, financial accounts) occurred. The company engaged forensic investigators, shut down systems, and notified law enforcement. Affected individuals were offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 108 days

Nov 16, 2020

Discovered

Mar 4, 2021

Filed

vs. sector median

+8 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_1ac6baa42406e64a2021-03-04Verified
Oregon State AGbd_7a710c8c46f7a6062021-03-04Verified
Maine State AGbd_8bef916e42a8ee2c2021-03-04Verified
California State AGbd_9e7111b289983e7f2021-03-04Verified

Show 6 more filings ↓up to 62d gap

Washington State AGbd_a34234edbe38ad0a2021-03-04Verified
Indiana State AGbd_f509be79f21262932021-03-04Verified
New Hampshire State AGbd_304b701808bb47642021-03-05 · +1dVerified
California State AGbd_97b9991f957989cb2021-03-30 · +26dVerified
Maine State AGbd_b5e51d5932a4c8862021-04-12 · +39dVerified
Illinois State AGbd_83623693d978b52d2021-01-01 · +62dCandidate

Name: AMERICOLD REALTY TRUST, INC
norm: americold realty
Domain: americold.com

Name: AMERICOLD REALTY TRUST, INC
norm: americold realty
Domain: americold.com
Industry: Otherllm

Discovered: Nov 16, 2020
Materiality determined: —
Notification sent: Mar 4, 2021
Affected individuals: 62state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement and have been cooperating with their investigation
Initial access: valid_credentials

During the incident: Engaged a third-party cybersecurity firm to assist with that investigation
Preemptively shut down our systems to contain the incident
Undertook a secure, managed restoration
Promptly notified law enforcement and have been cooperating with their investigation
Changes made: Taken steps to further strengthen and enhance the security of systems in our network
Updating administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(108 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+62d

Oregon State AG+62d

Maine State AG+62d

California State AG+62d

Washington State AG+62d

Indiana State AG+62d

Montana State AG+62d · this page

New Hampshire State AG+63d

California State AG+88d

Maine State AG+101d

Pattern: first filing Jan 1 (IL), last Apr 12 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/ameri-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2021
Raw hash: b9f29ee070987e84967ec83c0f3fd7d364d92df34ae6e2b86da4b22d0ecad1a3

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAMERICOLD REALTY TRUST, INC

Victim entityAMERICOLD REALTY TRUST, INC

Incidentdiscovered Nov 16, 2020

Stated responseEngaged a third-party cybersecurity firm to assist with that investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov