Home > Consumer Information > Privacy, Identity Theft and Data Security Breaches > Data Breach Notifications
Data Breach Notifications
Entity Information
- Type of Organization: Other Commercial
- Entity Name: Storopack, Inc.
- Street Address: 4758 Devitt Dr.
- City: Cincinnati
- State, or Country if outside the US: OH
- Zip Code: 45240
Submitted By
- Name: Robert Dibert
- Title: Attorney
- Firm name (if different than entity): Frost Brown Todd, LLP
- Telephone Number: 5025680379
- Email Address: bdibert@fbtlaw.com
- Relationship to entity whose information was compromised: Outside counsel
Breach Information
- Total number of persons affected (including residents): None known; possibly up to 1,304
- Total number of Maine residents affected: None known; possibly up to one
- If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
- Date(s) Breach Occured: Initial breach occurred on 3/15/2023
- Date Breach Discovered: Systems encryption & ransomware demand occurred 3/21/2023
- Description of the Breach:
- Other, External system breach (hacking)
- If other, please specify: Storopack's parent corporation, Storopack Hans Reichenecker GmbH ("Storopack GmbH"), suffered a ransomware attack in Germany. Through acquisition and misuse of administrative privileges, the company’s application servers and domain controllers were encrypted and the attacker(s) demanded payment of a ransom in exchange for a key to decrypt the disabled systems. Storopack has not received any additional demands, threats or other communications from the attacker(s), However, on June 12 Storopack learned of a statement made on the internet that the incident did include taking of personal information relating to residents of France, Switzerland and Asia.
- Information Acquired - Name or other personal identifier in combination with:
Notification and Protection Services
- Type of Notification: Written
- Date(s) of consumer notification: Storopack has no individual retail consumer-customers. First notification of the incident was made to employees on 4/20/2023. Follow-up notification, including an offer of 24 months' free credit monitoring and identity theft protection, was made on 6/29/2023.
- Copy of notice to affected Maine residents: 2023Jun28 Storopack USA.pdf
- Date of any previous (within 12 months) breach notifications: None
- Were identity theft protection services offered: Yes
- If yes, please provide the duration, the provider of the service and a brief description of the service: 24 months' free credit monitoring & identity theft protection via Equifax, as described in the attached notification