HackingManufacturingHealthcareManufacturingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Navistar, Inc.

bd_f28d8b0be584387e · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 20, 2021

Filed

Sep 27, 2021

To disclose

19 weeks

Affected

22state residents only

Linked

9 filings

Confidence

66%

Full breach record for Navistar, Inc. →2 incidents on file

Navistar, Inc. notified the NH Attorney General of a security incident discovered on May 20, 2021. An unauthorized third party accessed and exfiltrated personal information of current/former employees and dependents, including SSNs, DOBs, and health plan data. 22 NH residents affected. Notifications sent Sept 21, 2021. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 130 days

May 20, 2021

Discovered

Sep 27, 2021

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemarketobd_88937ae0bcfdcdae2021-12-07 · +71dCandidate

Regulatory filings (7) · sorted by filing gap

Montana State AGbd_091e66dd53974f082021-09-21 · +6dVerified
California State AGbd_396e87c59bc40b922021-09-21 · +6dVerified
Maine State AGbd_fc56b392677781602021-09-20 · +7dVerified
Indiana State AGbd_28520d17c359c9ae2021-07-06 · +83dVerified

Show 3 more filings ↓up to 269d gap

Massachusetts State AGbd_cb43d19b0625fbf22021-07-02 · +87dVerified
Illinois State AGbd_cb9157ac2506eb192021-01-01 · +269dCandidate
Illinois State AGbd_f9400c143cd437802021-01-01 · +269dVerified

Name: Navistar, Inc.
norm: navistar
Domain: navistar.com

Name: Navistar, Inc.
norm: navistar
Domain: navistar.com
Industry: ManufacturingllmHealthcarellm

Discovered: May 20, 2021
Materiality determined: —
Notification sent: Sep 21, 2021
Affected individuals: 22state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Secretary of Health and Human Services (Secretary) of this incidentNotifying the three largest nationwide consumer reporting agencies

During the incident: Launched an investigation
Took immediate action in accordance with our cybersecurity response plan
Conducted its investigation with the assistance of leading cybersecurity experts
Arranged for affected individuals to receive free credit monitoring and identity theft protection for two (2) years through Experian
Notified the Secretary of Health and Human Services
Notifying the three largest nationwide consumer reporting agencies, including Equifax, Experian and TransUnion
Changes made: Taken a number of steps to enhance our security protocols and controls, technology, and training
Continues to assess further options to protect our IT System
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(130 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+182d

Indiana State AG+186d

Maine State AG+262d

Montana State AG+263d

California State AG+263d

New Hampshire State AG+269d · this page

Pattern: first filing Jan 1 (IL), last Sep 27 (NH) — a 269-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/navistar-20210927.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2021
Raw hash: 69a2d9d2e0bea868fd74536038538d0f8ba499629c47ecca06981ee6b1565acb

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityNavistar, Inc.

Victim entityNavistar, Inc.

Incidentdiscovered May 20, 2021

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov