HackingStolen CredentialsData ExfiltratedPIICREDENTIALSLowContained
Ply Gem Residential Solutions
bd_ae9a167634bd9fc2 · schema v1 · pii pii-v1
Full breach record for Ply Gem Residential Solutions →Ply Gem Residential Solutions notified California residents of a data breach involving unauthorized access to employee email accounts between July 26, 2019, and November 18, 2019. The incident involved credential compromise leading to unauthorized access. The company secured accounts, engaged a cybersecurity firm, and provided one year of complimentary identity monitoring through Kroll to affected individuals.
California clockDiscovered Nov 18, 2019 → Notified Jun 25, 2020220d ✗ CA 60-day late36 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_03ebc40175a7596dWashington State AGfiled 2020-07-24Candidate
- bd_1f8bdeaff19625e3Montana State AGfiled 2020-07-24Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192393
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2020
- Raw hash
- 064106ad76e68b8cb12c8daab424d9b742b9055b6383d2597dba766e91d38f18
Reporting entity
- Name
- Ply Gem Residential Solutionsnorm: ply gem residential
Victim entity
- Name
- Ply Gem Residential Solutionsnorm: ply gem residential
Incident
- Discovered
- Nov 18, 2019
- Materiality determined
- —
- Notification sent
- Jun 25, 2020
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 36 weeks(249 days from discovery to filing)
- Compliance flags
- CA 60-day late · 220d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 18, 2019→ Notified: Jun 25, 2020220d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.