MalwareRansomwareData ExfiltratedEmployee Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Canon U.S.A., Inc.
bd_cd9c7ef755d53ecb · schema v1 · pii pii-v1
Full breach record for Canon U.S.A., Inc. →Canon U.S.A., Inc. disclosed a ransomware incident affecting employee data between July 20 and August 6, 2020. The breach exposed names, SSNs, driver's license numbers, and financial account details of current and former employees (2005-2020) and their beneficiaries. Canon engaged a cybersecurity firm, notified law enforcement, and provided one year of credit monitoring via Experian.
California clockDiscovered Aug 4, 2020 → Notified Nov 25, 2020113d ✗ CA 60-day late16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4175ed66eb6f67f4Montana State AGfiled 2020-11-25Candidate
- bd_56edf754b5e77234Oregon State AGfiled 2020-11-25Verified
- bd_c755f04850c8e836Maine State AGfiled 2020-11-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-196551
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 25, 2020
- Raw hash
- b6476618603710afe9f206673657f9e1df8f612b2535ef0f81e1a50d89aa7334
Reporting entity
- Name
- Canon U.S.A., Inc.norm: canon usa
Victim entity
- Name
- Canon U.S.A., Inc.norm: canon usa
Incident
- Discovered
- Aug 4, 2020
- Materiality determined
- —
- Notification sent
- Nov 25, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- CA 60-day late · 113d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 4, 2020→ Notified: Nov 25, 2020113d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.