AccidentalManufacturingManufacturingMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Collins Aerospace / RTX.com

bd_edc2a4b9112cf7f0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 7, 2019

Filed

Nov 22, 2019

To disclose

7 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for Collins Aerospace / RTX.com →4 incidents on file

Collins Aerospace disclosed that a processing error resulted in the accidental email transmission of an employee's 2018 W-2 form to an unauthorized individual on October 7, 2019. The exposed data included name, address, compensation, tax withholdings, and Social Security number. The company contacted the recipient, who confirmed deletion of the data. Credit monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 46 days

Oct 7, 2019

Begins

Oct 7, 2019

Discovered

Nov 22, 2019

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

South Carolina State AGbd_74604836adeb4b162019-11-20 · +2dCandidate
New Hampshire State AGbd_5d13473fe74ae1fb2019-11-25 · +3dVerified

Name: Collins Aerospace / RTX.com
norm: collins aerospace rtxcom
Domain: collinsaerospace.com

Name: Collins Aerospace / RTX.com
norm: collins aerospace rtxcom
Domain: collinsaerospace.com
Industry: Manufacturingllm

Discovered: Oct 7, 2019
Breach occurred: Oct 7, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2019
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown

During the incident: Contacted the recipient of the data and requested that the information be deleted
Secured a written statement from the recipient confirming deletion and non-retention of data
Offering 12 months of triple bureau credit monitoring, CyberScan dark web monitoring, a $1,000,000 insurance reimbursement policy and fully managed identity theft recovery services through MyIDCare
Changes made: Re-examining processing procedures to prevent a reoccurrence
Putting forth other safeguards that will better serve data protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

South Carolina State AGNov 20 · first

Delaware State AG+2d · this page

New Hampshire State AG+5d

Pattern: first filing Nov 20 (SC), last Nov 25 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2020/06/Collins-Notice-of-Data-Breach-General-Final.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2019
Raw hash: 1df70c4a9f4ac0114953fda9e7a08de78cef2de026af2d31a769b02a022893b0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCollins Aerospace / RTX.com

Victim entityCollins Aerospace / RTX.com

Incidentdiscovered Oct 7, 2019

Stated responseContacted the recipient of the data and requested that the information be deleted

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov