2022-11-07 PGT Innovations, Inc. Cybersecurity Incident

Page last updated on April 11, 2024

PGT Innovations, Inc. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2022-11-07 16:18:39 EST.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2022-11-05
Disclosure Date: 2022-11-07
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2022-11-07

PGT Innovations, Inc. filed an 8-K at 2022-11-07 16:18:39 EST
Accession Number: 0000950103-22-019314

Item 8.01 Other Events.

On November 5, 2022, PGT Innovations, Inc. (the “Company”) detected a ransomware infection that impacted portions of its network and caused disruption to daily business operations. Immediately, upon discovery, the Company engaged outside cybersecurity experts familiar with these types of incidents to conduct a forensic investigation and assess the extent and scope of the incident. This investigation is in its early stages and ongoing. To date, there is no evidence of personal information being accessed or acquired.

Security is a top priority for the Company, and the Company continues to work to take a series of measures to safeguard the integrity of its information technology systems. Upon detecting the security event, the Company took immediate steps designed to contain the incident and implement its business continuity plans to restore and support continued operations. The Company has notified appropriate law enforcement authorities.

The Company is also working closely with cybersecurity experts and legal counsel. The Company is in the early stages of its investigation and assessment of the security event and cannot determine, at this time, the extent of the impact from such event on its business, results of operations or financial condition or whether such impact will have a material adverse effect. The Company carries insurance, including cyber insurance, commensurate with the size and the nature of its operations. Further, while the Company is communicating with its customers regarding this disruption, it cannot guarantee that its customer relationships will not be harmed as a result of this event. In addition to these risks and other information set forth in this report, one should carefully consider the discussion on the other risks and uncertainties that cybersecurity incidents may have on us, contained in Part I, “Item 1A. Risk Factors” in the Company’s Annual Report on Form 10-K/A for the year ended January 1, 2022.

8-K filed on 2023-04-06

PGT Innovations, Inc. filed an 8-K at 2023-04-06 16:33:40 EDT
Accession Number: 0000950103-23-005484

Item 8.01 Other Events.

PGT Innovations, Inc. (the “Company”) previously announced in its Current Report on Form 8-K filed on November 7, 2022, its detection of a ransomware infection on November 5, 2022 that impacted portions of its network and caused disruption to daily business operations. Immediately, upon discovery, the Company engaged outside cybersecurity experts familiar with these types of incidents to conduct a forensic investigation and assess the extent and scope of the incident. As a result of this ongoing investigation and assessment, the Company became aware that personal information of certain current and former employees of the Company may have been accessed or acquired as a result of this incident. On April 3, 2023, the Company began notifying individuals affected by this attack, as well as to regulatory agencies as required by applicable federal and state law.

The Company continues to work closely with cybersecurity experts and legal counsel. The Company carries insurance, including cyber insurance, commensurate with the size and the nature of its operations. In addition to the information set forth in this report, one should carefully consider the discussion on the other risks and uncertainties that cybersecurity incidents may have on us, contained in Part I, “Item 1A. Risk Factors” in the Company’s Annual Report on Form 10-K for the year ended December 31, 2022.

Company Information