Social EngineeringManufacturingManufacturingPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

ABB

bd_9956c249d34e54fe · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 25, 2017

Filed

Sep 18, 2017

To disclose

24 days

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for ABB →2 incidents on file

ABB, Inc. notified Montana residents of a data breach involving a phishing email that compromised an employee's email account. Exposed data included names, addresses, SSNs, medical records, and direct deposit info. ABB engaged Kroll for identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 days

Aug 25, 2017

Begins

Aug 25, 2017

Discovered

Sep 18, 2017

Filed

vs. sector median

7 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

South Carolina State AGbd_6b90897c6f9b02812017-09-12 · +6dVerified
California State AGbd_b0f3f8a56b64160d2017-09-11 · +7dVerified
New Hampshire State AGbd_c71bd5c692d2dea72017-09-11 · +7dVerified
Massachusetts State AGbd_f813098da8386b762017-09-11 · +7dVerified

Name: ABB
norm: abb
Domain: careers.abb

Name: ABB
norm: abb
Domain: careers.abb
Industry: Manufacturingllm

Discovered: Aug 25, 2017
Breach occurred: Aug 25, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: ABB secured the services of Kroll to provide identity monitoring services
ABB will continue to monitor the situation carefully
Evaluating the policy regarding how employees handle personal information in an email account
Changes made: Evaluating the policy regarding how employees handle personal information in an email account
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGSep 11 · first

New Hampshire State AGSep 11 · first

Massachusetts State AGSep 11 · first

South Carolina State AG+1d

Montana State AG+7d · this page

Pattern: first filing Sep 11 (CA), last Sep 18 (MT) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/ABB.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 18, 2017
Raw hash: 8b833e641ed7562e2b31f262eb195f625fb68264e472867a612dfb683511db45

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityABB

Victim entityABB

Incidentdiscovered Aug 25, 2017

Stated responseABB secured the services of Kroll to provide identity monitoring services

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov