MalwareRansomwareStolen CredentialsData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICPHIMediumContained
Tree Top, Inc. and Northwest Naturals LLC
bd_a6baa5b2aadd74c9 · schema v1 · pii pii-v1
Full breach record for Tree Top, Inc. and Northwest Naturals LLC →Tree Top, Inc. and its subsidiary Northwest Naturals experienced a ransomware attack on November 10, 2020, discovered on November 11, 2020. Attackers gained access via a compromised user account and encrypted servers containing personal information of employees, applicants, cooperative members, and customers. Data exposed included names, addresses, SSNs, bank account info, health insurance numbers, and credit card details. The company engaged forensic experts, contained the breach, upgraded security controls, and offered one year of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2627babfee048025Oregon State AGfiled 2020-12-23Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-197530
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2020
- Raw hash
- 57982fa63218b6a8c2e106d81e6103b319eddcb7a11207a48affbf35465433a6
Reporting entity
- Name
- Tree Top Associates, LLCnorm: tree top associates
Victim entity
- Name
- Tree Top, Inc. and Northwest Naturals LLCnorm: tree top inc and northwest naturals
Incident
- Discovered
- Nov 11, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICPHI
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1078 Valid AccountsT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.