HackingManufacturingManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPIIMediumContained

SNAP-ON INCORPORATED

bd_f5815b56cbb965e5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2022

Filed

Apr 7, 2022

To disclose

5 weeks

Affected

144state residents only

Linked

10 records

Confidence

65%

Full breach record for SNAP-ON INCORPORATED →

Snap-on Incorporated notified Montana residents of a data breach occurring March 1-3, 2022. Unauthorized access affected associate and franchisee data including names, SSNs, DOBs, and employee IDs. The company contained the incident, notified the FBI, engaged forensic investigators, and offered 24-month credit monitoring via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 37 days

Mar 1, 2022

Begins

Mar 1, 2022

Discovered

Apr 7, 2022

Filed

This filing is one of 10 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_a519fc8ef0091a272022-04-10 · +3dVerified by operator

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_4cfb804700e45add2022-04-07Verified
Maine State AGbd_513f6c7ab841506c2022-04-07Verified
California State AGbd_75fcdb24d69d532b2022-04-07Verified
New Hampshire State AGbd_24e958da6d5a1b802022-04-08 · +1dVerified

Show 4 more filings ↓up to 96d gap

Massachusetts State AGbd_a309b89fc7a53cce2022-04-13 · +6dVerified
Washington State AGbd_f2d77bd4c6ff93132022-04-14 · +7dVerified
Oregon State AGbd_9938b1400eebc4f52022-04-20 · +13dVerified
Illinois State AGbd_22542ab9d295482d2022-01-01 · +96dCandidate

Name: SNAP-ON INCORPORATED
norm: snap on
Domain: snap-on.com

Name: SNAP-ON INCORPORATED
norm: snap on
Domain: snap-on.com
Industry: Manufacturingllm

Discovered: Mar 1, 2022
Breach occurred: Mar 1, 2022 – Mar 3, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 7, 2022
Affected individuals: 144state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notified the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Took down our network connections
Launched a comprehensive analysis of the incident
Promptly contained it
Notified the Federal Bureau of Investigation
Engaged a leading external forensics firm to assist us in this matter
Quarantined global assets to contain the outbreak
Heightened monitoring technology on servers and workstations across all environments
Enacted a rigorous vetting process for bringing systems back online
Allowed network access for only those machines that were confirmed to be uncompromised
Strengthened authentication protocols
Arranged, at no cost to you, for the option of enrolling in 24-month credit and fraud monitoring services
Engaged IDX, a leading identity protection service
Changes made: Strengthened authentication protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+96d

Maine State AG+96d

California State AG+96d

Montana State AG+96d · this page

New Hampshire State AG+97d

Massachusetts State AG+102d

Washington State AG+103d

Oregon State AG+109d

Pattern: first filing Jan 1 (IL), last Apr 20 (OR) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-296.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 7, 2022
Raw hash: cb1d75ea8e88ea63d4c8247e278894db78893c4e7ac77d3da552889a0a8f87be

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entitySNAP-ON INCORPORATED

Victim entitySNAP-ON INCORPORATED

Incidentdiscovered Mar 1, 2022

Stated responseTook down our network connections

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov