SNAP-ON INCORPORATED

Snap-on Incorporated (CIK 0000079812) filed its 10-K Item 1C disclosing its cybersecurity risk management program. The filing describes a cross-functional approach aligned with CIS Controls, involving Board oversight, a CIO, and an Incident Response Team. No specific cybersecurity incident, breach, or materiality determination is reported in this filing; it details preventive controls, third-party risk management, and employee training.

Snap-On Incorporated reported a data breach to the Oregon Attorney General. The breach was reported on 2022-04-20. The breach occurred during 3/3/2022. The breach was discovered on 3/3/2022. Notice was sent on 4/7/2022.

Snap-On Incorporated, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2022-03-03 and filed notice on 2022-04-14. 531 Washington residents were affected. 42 days elapsed between awareness and notification.

Snap-on Incorporated notified the New Hampshire Attorney General of a data incident in early March 2022. Unauthorized access resulted in the exfiltration of employee and franchisee personal information, including SSNs and tax IDs. Snap-on contained the breach by taking systems offline, engaged forensic investigators and the FBI, and notified 222 New Hampshire residents, offering 24 months of credit monitoring.

Snap-on, Inc. reported an external system breach (hacking) occurring on March 3, 2022, discovered on March 7, 2022. The incident affected 41,052 individuals, including 320 Maine residents. Acquired data included names and driver's license numbers. Snap-on notified consumers on April 7, 2022, and provided 24 months of credit monitoring and identity theft protection services through IDX.

Snap-on, Inc. reported a data breach occurring between March 1 and March 3, 2022, involving unauthorized access to associate and franchisee data. The incident exposed names, Social Security Numbers, dates of birth, and employee identification numbers. Snap-on contained the breach, notified the FBI, and engaged forensic investigators. Affected individuals were offered 24 months of credit monitoring and fraud detection services through IDX.

Snap-on Incorporated reported a data breach to the Montana Attorney General. The breach was reported on 2022-04-07. The breach occurred on 3/3/2022. 144 Montana residents were affected.