AccidentalManufacturingManufacturingMisdeliveryCustomer Data InvolvedGovernment IDIdentity (basic)HighResolved

JOHNSON MATTHEY INC.

bd_801c597139261001 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 15, 2024

Filed

Mar 18, 2024

To disclose

5 weeks

Affected · nationwide

6,0953 in this filing

Linked

5 filings

Confidence

66%

Full breach record for JOHNSON MATTHEY INC. →

Johnson Matthey, Inc. reported an inadvertent disclosure of personal information, including names and Social Security Numbers, affecting 6,095 individuals. The breach occurred between January 1, 2020, and February 15, 2024, and was discovered on February 15, 2024. Affected individuals received written notification on March 18, 2024, and were offered 24 months of credit monitoring and identity restoration services through Experian’s IdentityWorks.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 15, 2024 → Filed with AG Mar 18, 202432d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1506 days

discovery → filing · 5 weeks / 32 days

Jan 1, 2020

Begins

Feb 15, 2024

Discovered

Mar 18, 2024

Filed

vs. sector median

6 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_73f54870d5e3d0a42024-03-18Verified
New Hampshire State AGbd_85e79c0d9204dbf72024-03-18Verified
Indiana State AGbd_a14ba91227c9f7e02024-03-18Verified
California State AGbd_ef4ba323d8345d192024-03-18Verified

Name: JOHNSON MATTHEY INC.
norm: johnson matthey

Name: JOHNSON MATTHEY INC.
norm: johnson matthey
Industry: Manufacturingllm

Discovered: Feb 15, 2024
Breach occurred: Jan 1, 2020 – Feb 15, 2024
Undetected for: 1,506 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 18, 2024
Affected individuals: 6,095state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unknown

During the incident: Sent written notification to affected individuals
Provided 24 months of membership in Experian’s IdentityWorks product
Changes made: Provided 24 months of membership in Experian’s IdentityWorks product, which provides credit monitoring, fraud detection tools, identity restoration services and other benefits
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: ME AG >30d · 32d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 15, 2024
→ Filed with AG: Mar 18, 2024
32d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 15, 2024 → Filed with AG: Mar 18, 2024	32d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGMar 18 · first

New Hampshire State AGMar 18 · first

Indiana State AGMar 18 · first

California State AGMar 18 · first

Maine State AGMar 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0e20168d-cc87-4952-a038-d810088896ac.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 18, 2024
Raw hash: ca00f171d7ae1b555088ef5c36a56d0437ca72b558cfb95240c5330cf53da5a8

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJOHNSON MATTHEY INC.

Victim entityJOHNSON MATTHEY INC.

Incidentdiscovered Feb 15, 2024

Stated responseSent written notification to affected individuals

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov