THYSSENKRUPP MATERIALS, LLC

Supplemental state-AG notification from thyssenkrupp Materials Group (via Greenberg Traurig) to NH AG regarding a Dec 28, 2020 ransomware attack. The incident encrypted servers/workstations. The company identified 6 NH residents (current/former employees and family) whose PII (SSN, DOB, payroll, health info) was compromised. Notifications began May 19, 2021, offering 2 years of credit monitoring. Discovery of specific data compromise was Jan 28, 2021; review completed May 5, 2021.

thyssenkrupp Materials group of companies in the United States and Canada experienced a ransomware attack on December 28, 2020, encrypting servers and workstations containing HR information for current and former employees. Affected data included names, addresses, SSNs, birthdates, direct deposit info, payroll info, and health information. Approximately 2 New Hampshire residents were notified. The company isolated the attack, secured its IT environment, and offered 24 months of credit monitoring.

On December 28, 2020, thyssenkrupp Materials (US and Canada) suffered a ransomware attack that encrypted servers and workstations. The threat actor had access to HR data including employee names, addresses, SSNs, birthdates, direct deposit/payroll information, health information, and contact details. The company isolated the attack, hardened systems, and offered 24-month credit monitoring to affected current and former employees.

thyssenkrupp Materials reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-01-26. 474 Massachusetts residents were affected. The report records the breach type as electronic.

thyssenkrupp Materials experienced an external system breach on December 28, 2020, which was discovered the same day. The breach resulted in the compromise of Social Security numbers. The company provided written notification to affected individuals on January 19, 2021, and offered 24 months of credit monitoring and identity theft restoration services through TransUnion. The incident affected one resident of Maine.

thyssenkrupp Materials reported an external system breach (hacking) on 12/28/2020, affecting 10,462 individuals, including 1 Maine resident. The breach involved the acquisition of names and Social Security Numbers. Written notification was sent on 01/19/2021, offering 24 months of credit monitoring and identity theft restoration services via TransUnion.

thyssenkrupp Materials group of companies reported a ransomware attack on December 28, 2020, encrypting servers and workstations. The incident exposed HR data of current and former employees, including names, SSNs, birthdates, direct deposit info, payroll data, and health information. Approximately 1,250 Washington residents were notified. The company isolated the attack, enhanced security controls, and offered 24 months of credit monitoring via TransUnion.

thyssenkrupp Materials reported an external system breach (hacking) that occurred and was discovered on December 28, 2020. The incident affected 9,207 individuals, compromising names and Social Security numbers. The company began notifying affected individuals on January 19, 2021, and offered 24 months of credit monitoring and identity theft restoration services through TransUnion.

thyssenkrupp Materials reported a data breach to the Indiana Attorney General. The breach occurred on 2020-12-28 and was reported on 2021-01-19. 527 Indiana residents were affected. 10,462 individuals affected in total.

THYSSENKRUPP MATERIALS GROUP filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-182). The register records the breach as discovered on December 28, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

ThyssenKrupp OnlineMetals, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-05-06. 37 Massachusetts residents were affected. The report records the breach type as electronic.