HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Simpson Strong-Tie
bd_e9b36fbacf8cf751 · schema v1 · pii pii-v1
Full breach record for Simpson Strong-Tie →Simpson Strong-Tie Co. Inc. notified the California Attorney General of a data breach where an unknown third party accessed its IT infrastructure from October 9-11, 2023. The company discovered the incident on October 10, 2023. Personal information, including identity data, was accessed. The company secured its environment, reset passwords, enhanced monitoring, and offered two years of credit monitoring to affected individuals.
California clockDiscovered Oct 10, 2023 → Notified Mar 19, 2024161d ✗ CA 60-day late23 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_93a5b96dd2b5cdf3Maine State AGfiled 2024-03-21Candidate
- bd_2c6394bc16172218Indiana State AGfiled 2024-03-19(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-582877
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 21, 2024
- Raw hash
- 267b1ea874a471aff049dcd4a025492ff2bc855ee02198c51ee5d925777879a9
Reporting entity
- Name
- Simpson Strong-Tienorm: simpson strong tie
- Domain
- strongtie.com
Victim entity
- Name
- Simpson Strong-Tienorm: simpson strong tie
- Domain
- strongtie.com
Incident
- Discovered
- Oct 10, 2023
- Materiality determined
- —
- Notification sent
- Mar 19, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 23 weeks(163 days from discovery to filing)
- Compliance flags
- CA 60-day late · 161dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 10, 2023→ Notified: Mar 19, 2024161d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.