HackingTechnologyInformationEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

BELDEN INC.

bd_a2dfc0946b798fac · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 12, 2020

Filed

Dec 14, 2020

To disclose

5 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

65%

Full breach record for BELDEN INC. →3 incidents on file

Belden, Inc. disclosed a data security incident affecting Grass Valley USA, LLC employees. On November 12, 2020, Belden detected unusual activity on servers containing personal information of current and former employees. An external party accessed servers containing names, birthdates, SSNs, bank account info, and employment data. Belden contained the access, engaged forensic experts, and notified law enforcement. Identity protection services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 12, 2020 → Notified Nov 24, 202012d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 32 days

Nov 12, 2020

Discovered

Dec 14, 2020

Filed

vs. sector median

14 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_189033c89f5af7182020-12-14Candidate
Oregon State AGbd_191a2b2e9f0f73482020-12-14Verified
California State AGbd_43ef5bdc1cf5f6e42020-12-14Verified
Indiana State AGbd_7a1b7d7a7c3c77ca2020-12-14Verified

Show 4 more filings ↓up to 7d gap

Massachusetts State AGbd_83710412470012b42020-12-14Verified
Montana State AGbd_b0003efc0d9de31d2020-12-14Verified
New Hampshire State AGbd_ab026bd97d1cef2a2020-12-15 · +1dVerified
New Hampshire State AGbd_2dbcaeeaa0e44afa2020-12-21 · +7dVerified

Name: BELDEN INC.
norm: belden
Domain: belden.com

Name: BELDEN INC.
norm: belden
Domain: belden.com
Industry: Technologyllm

Discovered: Nov 12, 2020
Materiality determined: —
Notification sent: Nov 24, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Working with regulatory and law enforcement officials, including the F.B.I. and Department of Homeland Security

During the incident: Triggered its cybersecurity incident response plan
Deployed teams of internal IT specialists
Engaged leading third-party cybersecurity forensic experts and other advisors
Stopped further unauthorized access of personal data on its servers
Working with regulatory and law enforcement officials, including the F.B.I. and Department of Homeland Security
Continuously monitoring for any suspicious activity on its systems
Deployed additional resources to reinforce the security of its systems
Offering a complimentary twenty-four month membership of Experian IdentityWorks SM Credit 3B
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: CA 60-day OK · 12d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 12, 2020
→ Notified: Nov 24, 2020
12d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 12, 2020 → Notified: Nov 24, 2020	12d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Maine State AGDec 14 · first

Oregon State AGDec 14 · first

California State AGDec 14 · first

Indiana State AGDec 14 · first

Massachusetts State AGDec 14 · first

Montana State AGDec 14 · first

California State AGDec 14 · first · this page

New Hampshire State AG+1d

New Hampshire State AG+7d

Pattern: first filing Dec 14 (ME), last Dec 21 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-197167
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 14, 2020
Raw hash: 55f0b51c7d7e3f25deea27c78b67fca4d82221413f67a8ef8a2833224ff616a1

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityBELDEN INC.

Victim entityBELDEN INC.

Incidentdiscovered Nov 12, 2020

Stated responseTriggered its cybersecurity incident response plan

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov