Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Storopack, Inc.
  • Street Address: 4758 Devitt Dr.
  • City: Cincinnati
  • State, or Country if outside the US: OH
  • Zip Code: 45240

Submitted By

  • Name: Robert Dibert
  • Title: Attorney
  • Firm name (if different than entity): Frost Brown Todd, LLP
  • Telephone Number: 5025680379
  • Email Address: bdibert@fbtlaw.com
  • Relationship to entity whose information was compromised: Outside counsel

Breach Information

  • Total number of persons affected (including residents): None known; possibly up to 1,304
  • Total number of Maine residents affected: None known; possibly up to one
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: Initial breach occurred on 3/15/2023
  • Date Breach Discovered: Systems encryption & ransomware demand occurred 3/21/2023
  • Description of the Breach:
    • Other, External system breach (hacking)
    • If other, please specify: Storopack's parent corporation, Storopack Hans Reichenecker GmbH ("Storopack GmbH"), suffered a ransomware attack in Germany. Through acquisition and misuse of administrative privileges, the company’s application servers and domain controllers were encrypted and the attacker(s) demanded payment of a ransom in exchange for a key to decrypt the disabled systems. Storopack has not received any additional demands, threats or other communications from the attacker(s), However, on June 12 Storopack learned of a statement made on the internet that the incident did include taking of personal information relating to residents of France, Switzerland and Asia.
  • Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: Storopack has no individual retail consumer-customers. First notification of the incident was made to employees on 4/20/2023. Follow-up notification, including an offer of 24 months' free credit monitoring and identity theft protection, was made on 6/29/2023.
  • Copy of notice to affected Maine residents: 2023Jun28 Storopack USA.pdf
  • Date of any previous (within 12 months) breach notifications: None
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24 months' free credit monitoring & identity theft protection via Equifax, as described in the attached notification