MalwareOtherRansomwareData ExfiltratedRansom DemandedAuthenticationBiometricCredentialsFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

AMERICOLD REALTY TRUST, INC

bd_a34234edbe38ad0a · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 16, 2020

Filed

Mar 4, 2021

To disclose

15 weeks

Affected

3,337state residents only

Linked

11 filings

Confidence

69%

Full breach record for AMERICOLD REALTY TRUST, INC →3 incidents on file

Americold Realty Trust notified the Washington AG of a ransomware incident discovered on November 16, 2020. The attack encrypted systems, forcing a shutdown and restoration from backups. 3,337 Washington residents' personal information, including SSNs and financial data, was potentially accessed. Americold engaged forensic investigators, notified law enforcement, and provided 24 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d15 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 15 weeks / 108 days

Nov 16, 2020

Discovered

Mar 4, 2021

Filed

vs. sector median

+8 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_1ac6baa42406e64a2021-03-04Verified
Montana State AGbd_7312a6c2c59a42522021-03-04Verified
Oregon State AGbd_7a710c8c46f7a6062021-03-04Verified
Maine State AGbd_8bef916e42a8ee2c2021-03-04Verified

Show 6 more filings ↓up to 62d gap

California State AGbd_9e7111b289983e7f2021-03-04Verified
Indiana State AGbd_f509be79f21262932021-03-04Verified
New Hampshire State AGbd_304b701808bb47642021-03-05 · +1dVerified
California State AGbd_97b9991f957989cb2021-03-30 · +26dVerified
Maine State AGbd_b5e51d5932a4c8862021-04-12 · +39dVerified
Illinois State AGbd_83623693d978b52d2021-01-01 · +62dCandidate

Name: King & Spalding LLP
norm: king spalding

Name: AMERICOLD REALTY TRUST, INC
norm: americold realty
Domain: americold.com
Industry: Otherllm

Discovered: Nov 16, 2020
Materiality determined: —
Notification sent: Mar 4, 2021
Affected individuals: 3,337state-resident count only
Data types: AuthenticationBiometricCredentialsFinancial accountIdentity (basic)Government IDPHI
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthUnique private keyHealth insurance IDMedical informationBiometric dataUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Office of the Attorney General of Washington

During the incident: Engaged a third-party cybersecurity firm to assist with the investigation
Preemptively shut down its systems
Undertook a secure, managed restoration from backup systems
Notified law enforcement and has been cooperating with their investigation
Sent letters to all current associates in the United States offering complimentary two-year membership of Experian’s IdentityWorks
Established a call center to answer consumer questions
Changes made: Taken steps to further strengthen and enhance the security of systems in its network
Updating administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(108 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+62d

Montana State AG+62d

Oregon State AG+62d

Maine State AG+62d

California State AG+62d

Indiana State AG+62d

Washington State AG+62d · this page

New Hampshire State AG+63d

California State AG+88d

Maine State AG+101d

Pattern: first filing Jan 1 (IL), last Apr 12 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10413.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2021
Raw hash: 074876096937279f7c2be76bd3e04e12bb6ec725b67b36ee950fb9ec0288d90d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityKing & Spalding LLP

Victim entityAMERICOLD REALTY TRUST, INC

Incidentdiscovered Nov 16, 2020

Stated responseEngaged a third-party cybersecurity firm to assist with the investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com