WESTINGHOUSE AIR BRAKE TECHNOLOGIES CORP

Wabtec Corporation (ticker: WAB) filed its 10-K Item 1C disclosing no material cybersecurity incidents to date. The filing details a comprehensive cybersecurity risk management framework, including Board oversight via the Risk and Public Policy Committee, dedicated CISO/CIO leadership, third-party assessments, and cybersecurity insurance. The company states that cybersecurity threats have not materially impacted business, operations, or financial results.

Wabtec Corporation experienced a cyber incident where malware was introduced into systems as early as March 15, 2022. The company became aware of unusual activity on June 26, 2022. Forensic investigation revealed unauthorized access and data exfiltration, with some data later posted to a threat actor's leak site. Affected individuals' information included names and potentially Social Security numbers, credit/debit card numbers, or bank account numbers. Wabtec engaged cybersecurity firms, notified the FBI, implemented additional safeguards, and offered 24 months of credit monitoring.

Wabtec Corporation reported a data breach to the Montana Attorney General. The breach was reported on 2022-12-30. The breach occurred from 6/26/2022 to 8/24/2022. 6 Montana residents were affected.

Wabtec Corporation reported a ransomware incident affecting 3 New Hampshire residents. Malware was introduced as early as March 15, 2022, with discovery on June 26, 2022. Attackers exfiltrated and published data including names and SSNs. Wabtec engaged forensic investigators, notified the FBI, and offered 24 months of credit monitoring.

Wabtec Corporation reported an external system breach (hacking) occurring on 06/26/2022 and discovered on 11/23/2022. The incident affected 7,415 individuals, including 2 Maine residents. Acquired information included names and Social Security Numbers. Wabtec provided 24 months of credit monitoring and ID restoration services through Equifax.