FEDERALItem 8.01 · voluntaryHackingManufacturingManufacturingVulnerability ExploitSupply Chain (3P Vendor)Zero-DayCustomer Data InvolvedEmployee Data InvolvedPIIMediumActive

GARRETT MOTION INC.

bd_c4fd29297f92fc17 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 28, 2023

Filed

Aug 2, 2023

To disclose

5 days

Affected

Not disclosed

Linked

3 records

Confidence

67%

Full breach record for GARRETT MOTION INC. →

Garrett Motion Inc. disclosed that an unauthorized party gained access to certain data of the Company, its employees, and customers via a previously unknown vulnerability in Progress Software's MOVEit file transfer software. The Company became aware of the incident on July 28, 2023, after the vendor provided a patch. Garrett Motion immediately implemented the patch, launched an investigation with third-party experts, and notified law enforcement. The Company believes the incident will have no material adverse effect on its business.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 days

Jul 28, 2023

Discovered

Aug 2, 2023

Filed

This filing is one of 3 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedispossessorbd_8fb0cb42b35a8d902024-04-19 · +261dVerified by operator
Leak Sitecl0pbd_c110fd44a7c522f12023-07-26 · +7dCandidate

Name: GARRETT MOTION INC.
norm: garrett motion
SEC CIK: 0001735707
Domain: garrettmotion.com

Name: GARRETT MOTION INC.
norm: garrett motion
SEC CIK: 0001735707
Domain: garrettmotion.com
Industry: Manufacturingnaics map

Discovered: Jul 28, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: supply_chain

During the incident: Implemented the patch immediately upon receipt from the Vendor
Launched an investigation in partnership with third-party cybersecurity experts
Notified law enforcement
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 days(5 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1735707/000095014223002128/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 2, 2023
Raw hash: 01e9deb9fe26e85d0797cc8b44bf4dac07c1220713dc07e93ea7e9c187ce844d

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html26.4 KB

Download View at source

Linked disclosures

Ransomware claims (2)

Reporting entityGARRETT MOTION INC.

Victim entityGARRETT MOTION INC.

Incidentdiscovered Jul 28, 2023

Stated responseImplemented the patch immediately upon receipt from the Vendor

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing