AccidentalManufacturingTechnologyManufacturingMisdeliveryCustomer Data InvolvedGovernment IDIdentity (basic)MediumResolved

THE BOEING COMPANY

bd_df54783c69dfe6ab · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 20, 2017

To disclose

—

Affected

1state residents only

Confidence

67%

Full breach record for THE BOEING COMPANY →11 incidents on file

Boeing notified affected individuals of a data security incident where a standard company report regarding people with security clearances was accidentally sent to a large distribution list, including Social Security Numbers. Boeing offered two years of Experian IdentityWorks and is adjusting the report to prevent future occurrences.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Dec 20, 2017

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: THE BOEING COMPANY
norm: the boeing
Domain: boeing.com

Name: THE BOEING COMPANY
norm: the boeing
Domain: boeing.com
Industry: ManufacturingllmTechnologyllm

Discovered: —
Materiality determined: —
Notification sent: Dec 19, 2017
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1119 Automated Collection

During the incident: Offering access to Experian’s Identity Restoration assistance
Offering a complimentary two-year membership of Experian’s IdentityWorks
Adjusting the report to prevent the accidental inclusion of social security numbers in the future
Developing tools to alert users when documents like this contain social security number
Changes made: Adjusting the report to prevent the accidental inclusion of social security numbers in the future
Developing tools to alert users when documents like this contain social security number
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Boeing-2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 20, 2017
Raw hash: 16cf6f9a47ec7ad56cad3e1c1e72d00715fa645c141818ecb45460a0813a3a9d

Reporting entityTHE BOEING COMPANY

Victim entityTHE BOEING COMPANY

IncidentUnknown

Stated responseOffering access to Experian’s Identity Restoration assistance

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov