MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Tekni-Plex, Inc.

bd_cb4b40c9f7f72b96 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 18, 2024

Filed

Sep 24, 2025

To disclose

44 weeks

Affected

525state residents only

Linked

12 records

Confidence

71%

Full breach record for Tekni-Plex, Inc. →

Tekni-Plex, Inc. reported a ransomware incident affecting Washington residents. Unauthorized access occurred between Oct 25 and Dec 7, 2024, discovered Nov 18, 2024. Data included names, SSNs, financial accounts, and PHI. 525 WA residents notified on Sep 24, 2025. Law enforcement notified; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d44 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 24 days

discovery → filing · 44 weeks / 310 days

Oct 25, 2024

Begins

Nov 18, 2024

Discovered

Sep 24, 2025

Filed

This filing is one of 12 records about the same incident.View merged incident

A leak claim by ransomhub about this victim was first seen 285 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhubbd_c91288859b993ccc2024-12-07 · +291dVerified by operator

Regulatory filings (9) · sorted by filing gap

Nebraska State AGbd_00eb832a77124c332025-09-24Verified
Montana State AGbd_4010e8d6deab75112025-09-24Verified
Maine State AGbd_66595e0e3625e62d2025-09-24Verified
New Hampshire State AGbd_7fcdd8deb9fa0b282025-09-24Verified

Show 5 more filings ↓up to 23d gap

Indiana State AGbd_905f742041b935dc2025-09-24Verified
Massachusetts State AGbd_c4b8f0bbb08299ff2025-09-24Verified
Vermont State AGbd_c7b3db166a9335ea2025-09-24Verified
Texas State AGbd_174f7e296b3aea002025-09-26 · +2dVerified
Illinois State AGbd_dabe9b7771d108612025-09-01 · +23dCandidate

Showing first 10 of 11 linked disclosures.

Name: Tekni-Plex, Inc.
norm: tekni plex
Domain: tekni-plex.com

Name: Tekni-Plex, Inc.
norm: tekni plex
Domain: tekni-plex.com
Industry: Manufacturingllm

Discovered: Nov 18, 2024
Breach occurred: Oct 25, 2024 – Dec 7, 2024
Undetected for: 24 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 24, 2025
Affected individuals: 525state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: NameSocial Security numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementProvided written notice of this incident to state regulators where required

During the incident: Engaged third-party subject matter specialists to assess the types of data impacted
Notified federal law enforcement about the event
Provided access to credit monitoring services through IDX to affected individuals at no cost
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice of this incident to state regulators where required
Changes made: Working to implement additional safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(310 days from discovery to filing)
Compliance flags: WA AG >90dLeak >180d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGSep 1 · first

Nebraska State AG+23d

Montana State AG+23d

Maine State AG+23d

New Hampshire State AG+23d

Indiana State AG+23d

Massachusetts State AG+23d

Vermont State AG+23d

Washington State AG+23d · this page

Texas State AG+25d

Pattern: first filing Sep 1 (IL), last Sep 26 (TX) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34742.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 24, 2025
Raw hash: db79eee9edb04168151919bea9e8e17a41e7aec20d8aa0db5b162a4424f8cd8a

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityTekni-Plex, Inc.

Victim entityTekni-Plex, Inc.

Incidentdiscovered Nov 18, 2024

Stated responseEngaged third-party subject matter specialists to assess the types of data impacted

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com