INTERNATIONAL PAPER COMPANY
ent_019e5a7f9799548389ee6b99fe76d9fd
Disclosures
4
SEC 10-K Item 1C · State AG · 4 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
1,057
as filed · State AG WA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- INTERNATIONAL PAPER COMPANY
- Normalized
- international paper— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 824LMFJDH41EY779Q875
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- INTERNATIONAL PAPER CO /NEW/— per SEC Exhibit 21 filing
Disclosure history (4)newest first
- FEDERALSEC 10-K Item 1Cas victim2026-02-27
International Paper Company (ticker: IP) filed a 10-K Item 1C disclosure describing its cybersecurity risk management, governance, and third-party oversight processes. The filing explicitly states that cybersecurity threats have not materially affected the Company's business, results of operations, or financial condition. No specific incident, breach, or materiality determination is reported.
- 🦫Oregon State AGas victim2023-12-04
International Paper reported a data breach to the Oregon Attorney General. The breach was reported on 2023-12-04. The breach occurred during 5/30/2023 - 7/28/2023. The breach was discovered on 5/31/2023. Notice was sent on 11/22/2023.
- 🐻California State AGas victim2023-11-20
International Paper Company notified the California AG of a data breach affecting its Group Health and Welfare Plan participants. The incident occurred on May 30, 2023, when an unauthorized actor exploited a vulnerability in Progress Software's MOVEit Transfer tool used by third-party vendor Welltok, Inc. Welltok discovered the potential impact on July 26, 2023, and confirmed data exfiltration. Affected data includes personal information and electronic protected health information (ePHI). Welltok is offering 24 months of credit monitoring via Experian.
- 🌲Washington State AGas victim2023-11-17
International Paper Company, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-09-15 and filed notice on 2023-11-17. 1,057 Washington residents were affected. 63 days elapsed between awareness and notification. 108 days to identify the breach. 0 days to contain the breach.