HackingManufacturingManufacturingCustomer Data InvolvedDelayed DiscoveryGovernment IDFinancial accountMediumContained

Toyo Tanso USA

bd_ee86c573dd0b3c2a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 22, 2021

Filed

Oct 20, 2021

To disclose

28 days

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Toyo Tanso USA →

Toyo Tanso, USA notified the New Hampshire Attorney General of a security incident affecting one NH resident. Unauthorized access occurred May 24-25, 2021. The company detected the breach and determined on September 22, 2021, that a resident's SSN and financial account number may have been accessed. Toyo Tanso engaged a cybersecurity firm, notified law enforcement, and offered one year of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 121 days

discovery → filing · 28 days

May 24, 2021

Begins

Sep 22, 2021

Discovered

Oct 20, 2021

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_157513c4b6f493902021-10-20Candidate
Massachusetts State AGbd_3afac85c90a921372021-10-20Verified

Name: Toyo Tanso USA
norm: toyo tanso usa

Name: Toyo Tanso USA
norm: toyo tanso usa
Industry: Manufacturingllm

Discovered: Sep 22, 2021
Breach occurred: May 24, 2021 – May 25, 2021
Undetected for: 121 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2021
Affected individuals: 1state-resident count only
Data types: Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: exploit_public_facing

During the incident: Activated its incident response plan
Took measures to stop the unauthorized access
Launched an investigation
Engaged a cybersecurity firm to assist with the investigation
Notified law enforcement and is fully cooperating with their investigation
Changes made: Implementing additional measures to further enhance already exiting security protocols
Providing continued education and training to all employees
Offering eligible individuals a complimentary one-year membership in credit monitoring and identity theft protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 20 · first

Massachusetts State AGOct 20 · first

New Hampshire State AGOct 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/toyo-tanso-usa-20211020.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2021
Raw hash: 3af61efd19ce972b0a0afa7e1095c9b51a0ed5ad0377a9159369c0cc1b400270

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityToyo Tanso USA

Victim entityToyo Tanso USA

Incidentdiscovered Sep 22, 2021

Stated responseActivated its incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov