MalwareManufacturingManufacturingRansomwareRansom DemandedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Shoup Manufacturing Company, Inc.

bd_ca9179eb8faf19d0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 24, 2020

Filed

May 1, 2020

To disclose

10 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Shoup Manufacturing Company, Inc. →

Shoup Manufacturing Company, Inc. notified individuals of a ransomware incident discovered on February 24, 2020. An unknown actor encrypted data to extort money and accessed a folder containing personnel information, including names, SSNs, and financial account numbers. Shoup engaged forensic investigators, reset credentials, deployed EDR tools, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 67 days

Feb 24, 2020

Discovered

May 1, 2020

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_ad79bd7569657fe12020-05-01Verified

Name: Shoup Manufacturing Company, Inc.
norm: shoup manufacturing

Name: Shoup Manufacturing Company, Inc.
norm: shoup manufacturing
Industry: Manufacturingllm

Discovered: Feb 24, 2020
Materiality determined: —
Notification sent: May 1, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial

During the incident: Engaged a leading independent computer forensics firm
Launched an internal investigation
Took immediate and active steps to secure our environment
Offering credit and identity monitoring services for twelve months at no cost
Changes made: Deployment of robust endpoint detection and response tools
Conducting a global reset of credentials within our environment
Increasing employee education and training to emphasize cybersecurity awareness
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMay 1 · first

Montana State AGMay 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Shoup-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 1, 2020
Raw hash: 0a1f5c49513ea77bfc305a2f4f1f267405de7d8d436ecee38cd71df35004f07f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityShoup Manufacturing Company, Inc.

Victim entityShoup Manufacturing Company, Inc.

Incidentdiscovered Feb 24, 2020

Stated responseEngaged a leading independent computer forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov