Steel River Systems
Disclosed Dec 22, 20223 years ago219,447 affectedConfirmed
What is known
| People affected | 219,447 (as reported by the organization) |
|---|---|
| Disclosed | Dec 22, 2022 |
| Discovered | Jul 16, 2022 |
| Happened | May 25, 2022 |
| Attack | Ransomware |
| Data exposed | Names, Credentials and tokens |
| Sector | Manufacturing · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Steel River Systemsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Steel River Systemsatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Steel River Systemsattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Steel River Systemsjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2022 12 22 Steel River Systems Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Steel River Systemsin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 22, 2022 | |
| Washington AGresidents of WA | Dec 22, 2022 | 1,368 |
| Delaware DOJresidents of DE | Dec 22, 2022 | 1,733 |
| Oregon DOJresidents of OR | Dec 22, 2022 | 219,447 |
| Vermont AGresidents of VT | Dec 22, 2022 | |
| Indiana AGresidents of IN | Dec 22, 2022 | 4,375 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/D-BYear-to-Date-Report-2023.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2022-12-22-steel-river-systems-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 219447 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2022-07-16 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.