MalwareProfessional ServicesRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

RailWorks Corporation

bd_dd7e679267caadbd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 27, 2020

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for RailWorks Corporation →

RailWorks Corporation reported a cyberattack on January 27, 2020, where an unauthorized third party encrypted servers and systems. The incident potentially exposed employees' and former employees' names, addresses, Social Security numbers, driver's license numbers, dates of birth, and employment dates. RailWorks provided 12 months of free credit monitoring via Identity Guard. No specific malware family or threat actor was named.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 27, 2020

Begins

Feb 27, 2020

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_029317d5decd144d2020-02-27Candidate
Massachusetts State AGbd_3a5051a75ec68cfe2020-02-27Verified
Indiana State AGbd_49756e0439968ef32020-02-27Verified
Montana State AGbd_bb7977b8709a7e092020-02-27Verified

Name: RailWorks Corporation
norm: railworks

Name: RailWorks Corporation
norm: railworks

Discovered: —
Breach occurred: Jan 27, 2020
Materiality determined: —
Notification sent: Jan 30, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Providing access to free credit monitoring for twelve (12) months through Identity Guard Total
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGFeb 27 · first

Massachusetts State AGFeb 27 · first

Indiana State AGFeb 27 · first

Montana State AGFeb 27 · first

California State AGFeb 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-187766
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 27, 2020
Raw hash: 99c0923902593658ab92f353ee19a1a3d7b15d64ee84c8d4e1373bb686c29918

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityRailWorks Corporation

Victim entityRailWorks Corporation

IncidentRansomware

Stated responseProviding access to free credit monitoring for twelve (12) months through Identity Guard Total

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov