HackingManufacturingManufacturingData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

SNAP-ON INCORPORATED

bd_75fcdb24d69d532b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2022

Filed

Apr 7, 2022

To disclose

5 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

64%

Full breach record for SNAP-ON INCORPORATED →

Snap-on, Inc. disclosed that an unauthorized third party exfiltrated personal data of associates and franchisees between March 1 and March 3, 2022. The data included names, Social Security Numbers, dates of birth, and employee identification numbers. The company detected unusual activity in early March, contained the incident by taking down network connections, and engaged forensic investigators. Credit monitoring was offered to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 1, 2022 → Notified Apr 7, 202237d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 37 days

Mar 1, 2022

Begins

Mar 1, 2022

Discovered

Apr 7, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_a519fc8ef0091a272022-04-10 · +3dVerified by operator

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_4cfb804700e45add2022-04-07Verified
Maine State AGbd_513f6c7ab841506c2022-04-07Verified
Montana State AGbd_f5815b56cbb965e52022-04-07Verified
New Hampshire State AGbd_24e958da6d5a1b802022-04-08 · +1dVerified

Show 4 more filings ↓up to 96d gap

Massachusetts State AGbd_a309b89fc7a53cce2022-04-13 · +6dVerified
Washington State AGbd_f2d77bd4c6ff93132022-04-14 · +7dVerified
Oregon State AGbd_9938b1400eebc4f52022-04-20 · +13dVerified
Illinois State AGbd_22542ab9d295482d2022-01-01 · +96dCandidate

Name: SNAP-ON INCORPORATED
norm: snap on
Domain: snap-on.com

Name: SNAP-ON INCORPORATED
norm: snap on
Domain: snap-on.com
Industry: Manufacturingllm

Discovered: Mar 1, 2022
Breach occurred: Mar 1, 2022 – Mar 3, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 7, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Took down our network connections
Launched a comprehensive analysis of the incident
Notified the Federal Bureau of Investigation
Engaged a leading external forensics firm to assist us in this matter
Quarantined global assets to contain the outbreak
Heightened monitoring technology on servers and workstations across all environments
Enacted a rigorous vetting process for bringing systems back online
Allowed network access for only those machines that were confirmed to be uncompromised
Strengthened authentication protocols
Arranged, at no cost to you, for the option of enrolling in 24-month credit and fraud monitoring services
Changes made: Quarantined global assets to contain the outbreak
Heightened monitoring technology on servers and workstations across all environments
Enacted a rigorous vetting process for bringing systems back online
Allowed network access for only those machines that were confirmed to be uncompromised
Strengthened authentication protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: CA 60-day OK · 37d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 1, 2022
→ Notified: Apr 7, 2022
37d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 1, 2022 → Notified: Apr 7, 2022	37d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+96d

Maine State AG+96d

Montana State AG+96d

California State AG+96d · this page

New Hampshire State AG+97d

Massachusetts State AG+102d

Washington State AG+103d

Oregon State AG+109d

Pattern: first filing Jan 1 (IL), last Apr 20 (OR) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-552390
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 7, 2022
Raw hash: 22250f6f8cb8c9a00f59099fcf34eb2503247897254b9097a1e04fd6382b9295

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entitySNAP-ON INCORPORATED

Victim entitySNAP-ON INCORPORATED

Incidentdiscovered Mar 1, 2022

Stated responseTook down our network connections

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov