HackingManufacturingManufacturingStolen CredentialsTargetedIdentity (basic)LowContained

Instron

bd_c2025e1e7b4f70b3 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 21, 2023

To disclose

—

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for Instron →

Instron notified Montana residents of a data security incident where an unauthorized third party accessed its internal IT network between August 10-18, 2023. The incident involved the theft of company files containing personal information, including names. Instron engaged forensic consultants, reset passwords, and enhanced network monitoring. Affected individuals were offered 24 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Aug 10, 2023

Begins

Dec 21, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 71 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_f6c5e732b03ee1142023-10-11 · +71dCandidate

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_0be6426dcac08eb02023-12-21Candidate
Vermont State AGbd_1186e1aed21f3b4e2023-12-21Verified
New Hampshire State AGbd_b0e6f686dc0395472023-12-28 · +7dVerified

Name: Instron
norm: instron
Domain: instron.com

Name: Instron
norm: instron
Domain: instron.com
Industry: Manufacturingllm

Discovered: —
Breach occurred: Aug 10, 2023 – Aug 18, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Conducted a thorough investigation, with the assistance of outside forensic consultants
Effecting a password reset
Supplementing our network monitoring tools
Changes made: Effecting a password reset
Supplementing our network monitoring tools
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGDec 21 · first

Vermont State AGDec 21 · first

Montana State AGDec 21 · first · this page

New Hampshire State AG+7d

Pattern: first filing Dec 21 (ME), last Dec 28 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-967.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2023
Raw hash: f8738e1016966ebf1e8c2c551c622171a584169ccfe8c103a60b7db51900ddb3

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityInstron

Victim entityInstron

IncidentUnauthorized Access

Stated responseConducted a thorough investigation, with the assistance of outside forensic consultants

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov