FEDERALItem 8.01 · voluntaryUnknownFinancial ServicesFinanceLowContained

Willis Lease Finance Corporation

bd_b994aca8f31b0f5c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 31, 2024

Filed

Feb 9, 2024

To disclose

9 days

Affected

Not disclosed

Linked

4 records

Confidence

72%

Full breach record for Willis Lease Finance Corporation →

Willis Lease Finance Corporation (WLFC), an aircraft engine leasing company, disclosed in an Item 8.01 Form 8-K that on January 31, 2024 it detected unauthorized activity on portions of its IT systems. WLFC engaged third-party cybersecurity experts, took certain systems offline, and notified law enforcement. The company stated it has not identified unauthorized activity after February 2, 2024 and believes the activity is fully contained. Investigation into scope, including potential data exfiltration, remains ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 days

Jan 31, 2024

Discovered

Feb 9, 2024

Filed

vs. sector median

7 wks faster

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_55d48d98a49737932024-01-31 · +9dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_975d9277d515db012024-08-13 · +186dVerified by operator
Indiana State AGbd_9d2656612596501d2024-08-13 · +186dVerified by operator

Name: Willis Lease Finance Corporation
norm: willis lease finance
SEC CIK: 0001018164

Name: Willis Lease Finance Corporation
norm: willis lease finance
SEC CIK: 0001018164
Industry: Financial Servicesllm

Discovered: Jan 31, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unknown

During the incident: Launched an investigation into the nature and scope of the incident with the assistance of leading third-party cybersecurity experts
Took steps to contain, assess and remediate the activity, including taking certain systems offline
Implemented workarounds for some of its processes where necessary
Notified law enforcement of the incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 days(9 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

SEC 8-KFeb 9 · first · this page

Massachusetts State AG+186d

Indiana State AG+186d

Pattern: first filing Feb 9, last Aug 13 (IN) — a 186-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1018164/000101816424000005/wlfc-20240209.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 9, 2024
Raw hash: a7d6cce339c27c312869e1bfe55dd7d4b15df811834761150991d0c8edd00b58

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html29.1 KB

Download View at source

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityWillis Lease Finance Corporation

Victim entityWillis Lease Finance Corporation

Incidentdiscovered Jan 31, 2024

Stated responseLaunched an investigation into the nature and scope of the incident with the assistance of leading third-party cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing