HackingManufacturingManufacturingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)MediumContained

Mead Johnson & Company, LLC

bd_bfa641e8a3c4ab41 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 20, 2020

Filed

Mar 10, 2021

To disclose

16 weeks

Affected

2,828state residents only

Confidence

70%

Full breach record for Mead Johnson & Company, LLC →

Mead Johnson & Company, LLC reported a data breach involving its vendor ActiveProspect, Inc. on March 10, 2021. Unauthorized access occurred Nov 7-8, 2020, using an employee's credentials. 2,828 Washington residents had their names and DOB exposed. ActiveProspect detected the breach on Nov 20, 2020. Remediation included credential resets, safeguards, and 12 months of credit monitoring for affected individuals.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d16 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 13 days

discovery → filing · 16 weeks / 110 days

Nov 7, 2020

Begins

Nov 20, 2020

Discovered

Mar 10, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,828 affectedView incident

Name: Perkins Coie LLP
norm: perkins coie
Domain: perkinscoie.com

Name: Mead Johnson & Company, LLC
norm: mead johnson
Industry: Manufacturingllm

Discovered: Nov 20, 2020
Breach occurred: Nov 7, 2020 – Nov 8, 2020
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 10, 2021
Affected individuals: 2,828state-resident count only
Data types: Identity (basic)
Data elements: NameDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Washington State Office of the Attorney General
Initial access: valid_credentials

During the incident: Deleting the ActiveProspect employee’s account
Deleting the fraudulent accounts believed to have been created by the threat actor
Working with its employees to reset passwords
Providing further training to its employees regarding the company’s security policy
Instituting further administrative and technical safeguards
Hired a cybersecurity firm to monitor the dark web
Providing twelve (12) months of credit and identity monitoring services to each letter recipient at no cost through Experian
Changes made: Instituting further administrative and technical safeguards
Providing further training to its employees regarding the company’s security policy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10419.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2021
Raw hash: fc40ce9a0a33d19a3f7c295359bef896b1b44fdc5d79e2d9984a9d8c8f193433

Reporting entityPerkins Coie LLP

Victim entityMead Johnson & Company, LLC

Incidentdiscovered Nov 20, 2020

Stated responseDeleting the ActiveProspect employee’s account

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com