Johnson Matthey, Inc.

Johnson Matthey, Inc. experienced an inadvertent disclosure of personal information, reported by the Maine Office of the Attorney General on March 18, 2024. The breach occurred over an extended period, spanning from January 1, 2020, to February 15, 2024, exposing sensitive data of 6,095 individuals, primarily their Social Security numbers (SSNs). The compromised SSNs pose a significant risk of identity theft, financial fraud, and long-term reputational harm to the affected individuals. In response, the company offered 24 months of identity protection services through Experian’s IdentityWorks to mitigate potential damages. The incident highlights vulnerabilities in data handling practices, raising concerns about internal controls and the safeguarding of personally identifiable information (PII). While no ransomware or malicious cyber attack was explicitly mentioned, the scale and nature of the exposed data suggest a severe impact on customer trust and regulatory compliance.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0e20168d-cc87-4952-a038-d810088896ac.shtml

TPRM report: https://www.rankiteo.com/company/johnson-matthey

"id": "joh1021090725",
"linkid": "johnson-matthey",
"type": "Breach",
"date": "1/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 6095,
                        'industry': 'Chemicals / Specialty Materials',
                        'name': 'Johnson Matthey, Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': ['Offered 24 months of identity protection services '
                         "via Experian's IdentityWorks"],
 'data_breach': {'number_of_records_exposed': 6095,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information - PII)',
                 'type_of_data_compromised': ['Social Security numbers']},
 'date_detected': '2024-03-18',
 'date_publicly_disclosed': '2024-03-18',
 'description': 'The Maine Office of the Attorney General reported that '
                'Johnson Matthey, Inc. experienced an inadvertent disclosure '
                'of personal information. The breach occurred between January '
                '1, 2020, and February 15, 2024, affecting 6,095 individuals '
                'with compromised Social Security numbers. Identity protection '
                "services were offered for 24 months through Experian's "
                'IdentityWorks product.',
 'impact': {'brand_reputation_impact': 'Potential reputational harm due to '
                                       'exposure of sensitive personal data',
            'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High (Social Security numbers exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'remediation_measures': ['Offered 24 months of identity '
                                       "protection services via Experian's "
                                       'IdentityWorks'],
              'third_party_assistance': ['Experian (IdentityWorks for identity '
                                         'protection services)']},
 'title': 'Inadvertent Disclosure of Personal Information at Johnson Matthey, '
          'Inc.',
 'type': 'Data Breach (Inadvertent Disclosure)'}