On November 22, 2020, Merrill Steel detected unauthorized activity on certain of its computer networks. That unauthorized activity was limited to one day, lasted only a few hours on that day and upon discovery steps were taken to limit its scope. Despite those steps, the unauthorized access did nonetheless result in a ransomware attack such that certain of Merrill Steel's files were encrypted with no available means to decrypt them. Merrill immediately engaged IT and cyber security experts to investigate the incident, determine its scope and assist in obtaining the tools necessary to decrypt the affected files while also restoring our systems. Although that investigation remains ongoing and could yield a different outcome, Merrill has not currently found evidence that information on our systems was subjected to anything more than the unauthorized encryption. The information subjected to unauthorized encryption was only that of employees and no personal or sensitive information of customers was affected but did include the following elements of personal information about those employees and certain of their spouses and dependents:Out of an abundance of caution, Merrill Steel notified the affected individuals so that they could take steps to further protect their personal information. To assist them in doing so, Merrill Steel procured, for all affected employees, spouses and/or dependents, credit monitoring and other identity protection services. As the affected information included data governed by the Health Insurance Portability and Accountability Act or HIPAA Merrill Steel have notified and are working with the relevant HIPAA authorities.Since the time of the event, the talented employees of Merrill Steel have been working hard to recreate and restore the impacted systems and to further strengthen security systems to protect against a similar event occurring in the future. Schofield Wisconsin based Merrill Steel was founded in 1962 and is engaged in fabrication of structural steel and heavy plate for the general construction industry.
On November 22, 2020, Merrill Steel detected unauthorized activity on certain of its computer networks. That unauthorized activity was limited to one day, lasted only a few hours on that day and upon discovery steps were taken to limit its scope. Despite those steps, the unauthorized access did nonetheless result in a ransomware attack such that certain of Merrill Steel's files were encrypted with no available means to decrypt them. Merrill immediately engaged IT and cyber security experts to investigate the incident, determine its scope and assist in obtaining the tools necessary to decrypt the affected files while also restoring our systems. Although that investigation remains ongoing and could yield a different outcome, Merrill has not currently found evidence that information on our systems was subjected to anything more than the unauthorized encryption. The information subjected to unauthorized encryption was only that of employees and no personal or sensitive information of customers was affected but did include the following elements of personal information about those employees and certain of their spouses and dependents:Out of an abundance of caution, Merrill Steel notified the affected individuals so that they could take steps to further protect their personal information. To assist them in doing so, Merrill Steel procured, for all affected employees, spouses and/or dependents, credit monitoring and other identity protection services. As the affected information included data governed by the Health Insurance Portability and Accountability Act or HIPAA Merrill Steel have notified and are working with the relevant HIPAA authorities.Since the time of the event, the talented employees of Merrill Steel have been working hard to recreate and restore the impacted systems and to further strengthen security systems to protect against a similar event occurring in the future. Schofield Wisconsin based Merrill Steel was founded in 1962 and is engaged in fabrication of structural steel and heavy plate for the general construction industry.
