HackingTechnologyFinancial ServicesInformationVulnerability ExploitCapture Stored DataZero-DaySupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

HONEYWELL INTERNATIONAL INC.

bd_87bef0e9631084a0 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 3, 2023

Filed

Sep 18, 2023

To disclose

15 weeks

Affected

1,069state residents only

Linked

12 records

Confidence

67%

Full breach record for HONEYWELL INTERNATIONAL INC. →3 incidents on file

Honeywell International Inc. notified New Hampshire AG of a data breach impacting 1,069 state residents. The incident resulted from a zero-day vulnerability in Progress Software's MOVEit Transfer application used for secure file transfers. Honeywell discovered the impact on June 3, 2023, and notified residents on September 14, 2023. Affected data included personal information related to a pension plan. Honeywell engaged law enforcement, patched the vulnerability, and provided two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d15 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 15 weeks / 107 days

Jun 3, 2023

Discovered

Sep 18, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 12 records about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

A leak claim by cl0p about this victim was first seen 68 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_f22b7e440580f8b12023-07-12 · +68dVerified by operator

Regulatory filings (9) · sorted by filing gap

Vermont State AGbd_0e5f6f18649992892023-09-14 · +4dVerified by operator
Maine State AGbd_0d752e3684c41c282023-09-13 · +5dVerified by operator
California State AGbd_12855ab747f661932023-09-13 · +5dVerified by operator
South Carolina State AGbd_3289ac197c0ea2e82023-09-13 · +5dVerified by operator

Show 5 more filings ↓up to 94d gap

Oregon State AGbd_92d1816a1d43b54e2023-09-13 · +5dVerified by operator
Montana State AGbd_b81cb97c9dfc40f72023-09-13 · +5dVerified by operator
Washington State AGbd_df1d83259f5418df2023-09-13 · +5dVerified by operator
Massachusetts State AGbd_683fca2dfce9f4972023-06-16 · +94dVerified by operator
Indiana State AGbd_fd6b903b65c5629a2023-06-16 · +94dVerified by operator

Showing first 10 of 11 linked disclosures.

Name: HONEYWELL INTERNATIONAL INC.
norm: honeywell international
Domain: honeywell.com

Name: HONEYWELL INTERNATIONAL INC.
norm: honeywell international
Domain: honeywell.com
Industry: TechnologyllmFinancial Servicesllm

Discovered: Jun 3, 2023
Materiality determined: —
Notification sent: Sep 14, 2023
Affected individuals: 1,069state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Third party: via Progress Software Corporation
Initial access: exploit_public_facing

During the incident: Contacting law enforcement
Blocking the unauthorized access
Remediating the vulnerability in the third-party tool
Initiated an investigation using its internal cybersecurity experts
Applied the software patch that Progress Software provided
Changes made: Remediating the vulnerability in the third-party tool
Offering credit monitoring/identity protection services for a period of two years
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(107 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Massachusetts State AGJun 16 · first

Indiana State AGJun 16 · first

Maine State AG+89d

California State AG+89d

South Carolina State AG+89d

Oregon State AG+89d

Montana State AG+89d

Washington State AG+89d

Vermont State AG+90d

New Hampshire State AG+94d · this page

Pattern: first filing Jun 16 (MA), last Sep 18 (NH) — a 94-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/honeywell-international-20230918.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 18, 2023
Raw hash: 86a80d9068b67b10994a03e5b9fc5320d2395da7ca62c8af7711c8bc0ab4601d

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityHONEYWELL INTERNATIONAL INC.

Victim entityHONEYWELL INTERNATIONAL INC.

Incidentdiscovered Jun 3, 2023

Stated responseContacting law enforcement

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov