PUMA North America, Inc.
ent_14c99c268507d74887a11813
Disclosures
5
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
6,632
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- PUMA North America, Inc.
- Normalized
- puma north america— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- New Hampshire State AGas victim2022-02-08
PUMA North America, Inc. notified the NH AG of a ransomware attack on its HR vendor, UKG Inc. The attack, discovered by UKG on Dec 11, 2021, resulted in the unauthorized access and encryption of UKG's cloud environment and exfiltration of PUMA personnel data. PUMA was notified on Jan 10, 2022. 270 NH residents were affected, with data including names, SSNs, and employment info. PUMA offered 24 months of credit monitoring.
- California State AGas victim2022-02-03
PUMA North America, Inc. notified the California AG of a ransomware attack on its vendor, UKG Inc. (Kronos). The attacker accessed UKG's cloud environment earlier in 2021, stole data, and encrypted systems. Service interruptions were discovered on December 11, 2021. Personal information of PUMA employees and their dependents (including minors) was compromised. UKG offered 24 months of identity monitoring.
- Maine State AGas victim2022-02-03
PUMA North America, Inc. reported an external system breach (hacking) occurring on 12/11/2021, discovered on 01/10/2022. The incident affected 6,632 individuals, including 17 Maine residents. Acquired data included names and Social Security Numbers. PUMA provided written notification and offered two years of credit monitoring and identity protection services through Experian.
- Indiana State AGas victim2022-02-03
PUMA North America, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-12-11 and was reported on 2022-02-03. 96 Indiana residents were affected. 6,632 individuals affected in total.
- Massachusetts State AGas victim2022-02-03
PUMA North America, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-02-03. 1,159 Massachusetts residents were affected. The report records the breach type as electronic.