PGT Innovations, Inc.

PGT INNOVATIONS reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-07. 4 Massachusetts residents were affected. The report records the breach type as electronic.

PGT Innovations, Inc. filed an 8-K on April 6, 2023 following up on the ransomware infection it detected on November 5, 2022 and previously reported in a Form 8-K filed November 7, 2022. The infection impacted portions of its network and caused disruption to daily business operations, and the Company's ongoing forensic investigation led it to become aware that personal information of certain current and former employees may have been accessed or acquired. On April 3, 2023, the Company began notifying affected individuals and regulatory agencies, and it carries insurance, including cyber insurance.

PGT Innovations experienced an external system breach between October 13, 2022, and November 29, 2022, discovered on March 3, 2023. The breach compromised names and Social Security numbers. The company began notifying affected individuals on April 3, 2023, and offered 12 months of credit monitoring services through Experian.

PGT Innovations reported a data breach to the Indiana Attorney General. The breach occurred on 2022-10-13 and was reported on 2023-04-03. 9 Indiana residents were affected. 6,020 individuals affected in total.

PGT Innovations detected unauthorized access to its network on November 5, 2022. A subsequent forensic investigation determined that an unauthorized party potentially removed files containing personal information (names) between October 13, 2022, and November 29, 2022. The company contained the threat, restored data, notified law enforcement, and engaged external cybersecurity professionals. Complimentary credit monitoring was offered to affected individuals.