FEDERALUnknownManufacturingManufacturingLowResolved

Simpson

bd_f276717d1ec38cac · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 27, 2026

To disclose

—

Affected

Not disclosed

Confidence

67%

Full breach record for Simpson →

Simpson (10-K Item 1C) discloses a cybersecurity incident in October 2023 involving unauthorized access to information systems. The company responded by enhancing phishing training, deploying device security monitoring tools, and implementing cloud data visibility technology. The company states that no material financial impact resulted from the incident or other cybersecurity threats.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 27, 2026

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.No incident reportedView incident

Name: Simpson
norm: simpson

Name: Simpson
norm: simpson
Industry: Manufacturingllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unknown
Threat actor: External

During the incident: Increased our phishing awareness training and testing
Deployed a cybersecurity tool that continuously monitors and verifies the security posture of individual devices within our network
Deployed technology that provides visibility into our sensitive data across different cloud environments
Changes made: Increased our phishing awareness training and testing
Deployed a cybersecurity tool that continuously monitors and verifies the security posture of individual devices within our network
Deployed technology that provides visibility into our sensitive data across different cloud environments
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/920371/000162828026012920/ssd-20251231.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 27, 2026
Raw hash: 4c2403f381563ec0291412c52c463efbbf5eba574dfd33eb4e7de7188dd30daf

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.2 MB

Download View at source

Reporting entitySimpson

Victim entitySimpson

IncidentUnknown

Stated responseIncreased our phishing awareness training and testing

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing