2023-10-30 Mueller Water Products, Inc. Cybersecurity Incident

Page last updated on April 11, 2024

Mueller Water Products, Inc. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-10-30 07:31:52 EDT.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date:
Disclosure Date: 2023-10-30
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2023-10-30

Mueller Water Products, Inc. filed an 8-K at 2023-10-30 07:31:52 EDT
Accession Number: 0001350593-23-000046

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 8.01. Other Events.

On October 28, 2023, Mueller Water Products, Inc. (the “Company”) issued a press release regarding a cybersecurity incident involving the Company. A copy of the press release is attached and furnished as Exhibit 99.1 to this current report on Form 8-K and is incorporated herein by reference.

Item 9.01. Financial Statements and Exhibits.

(d) Exhibits.99.1Press Release, dated October 28, 2023101.INSInline XBRL Instance Document - the instance document does not appear in the Interactive Data File because its XBRL tags are embedded within the Inline XBRL document101.SCHInline XBRL Taxonomy Extension Schema Document101.DEFInline XBRL Taxonomy Extension Definition Linkbase Document101.LABInline XBRL Taxonomy Extension Labels Linkbase Document101.PREInline XBRL Taxonomy Extension Presentation Linkbase Document104Cover Page Interactive Data File (formatted as inline XBRL with applicable taxonomy extension information contained in Exhibits 101)
99.1
Press Release, dated October 28, 2023

8-K filed on 2023-11-29

Mueller Water Products, Inc. filed an 8-K at 2023-11-29 16:16:42 EST
Accession Number: 0001350593-23-000054

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 8.01. Other Events.

As previously announced on October 28, 2023, Mueller Water Products, Inc. (the “Company”) identified a cybersecurity incident impacting certain internal operational and information technology systems. Based on the information reviewed to date, the Company believes the unauthorized activity has been contained. All of the Company’s facilities are operational and have substantially returned to normalized operations.
This cybersecurity incident consisted of unauthorized access and deployment of ransomware by a third party to a portion of the Company’s internal information infrastructure. The incident caused disruptions and limitation of access to portions of the Company’s business applications supporting aspects of the Company’s operations and corporate functions, which limited the Company’s ability to take orders and ship products. The Company has largely restored the impacted applications and systems, and continues to execute business continuity and restoration plans for the remaining impacted applications and systems.
This cybersecurity incident disrupted access to certain systems and information required for the Company’s financial reporting. After restoring access to such systems and information, the Company has focused on verifying its data and completing its fiscal 2023 processes. Due to the timing of the incident, the Company will be delayed in filing its Annual Report on Form 10-K for the year ended September 30, 2023 (the “Form 10-K”). However, the Company currently expects to report its fiscal fourth quarter and fiscal 2023 results and file its Form 10-K no later than December 14, 2023, which is within the Rule 12b-25 period available to the Company for its Form 10-K. When the Company has greater certainty on the timing of the completion of its financial close and reporting processes, the Company will make an announcement related to the timing of its fourth quarter and fiscal 2023 earnings release and conference call.
The Company also identified a separate cybersecurity incident, which primarily related to a system that was end of life and was already in the process of being replaced in the ordinary course of business. The Company’s investigation and remediation efforts remain ongoing, including the analysis of data accessed, exfiltrated or otherwise impacted in connection with the cybersecurity incidents. The Company continues to evaluate the business, financial and related impacts of the cybersecurity incidents.
Forward-Looking Statements.
This Form 8-K contains certain statements that may be deemed “forward-looking statements” within the meaning of the federal securities laws. All statements that address activities, events or developments that the Company intends, expects, plans, projects, believes or anticipates will or may occur in the future are forward-looking statements, including, without limitation, statements regarding outlooks, projections, forecasts, expectations, and commitments. Forward-looking statements are based on certain assumptions and assessments made by the Company in light of the Company’s experience and perception of historical trends, current conditions and expected future developments. Such forward-looking statements may include, but are not limited to, the Company’s ongoing assessment of the impacts of the cybersecurity incident; the Company’s expectations regarding its ability to remediate the cybersecurity incident; further delays in the time required to verify some or all of the Company’s information systems; the impact of the incident on the Company’s ability to complete certain processes and procedures to finalize the Form 10-K; and the impact of the incident on the Company’s customers, business, operations and financial results.
Actual results and the timing of events may differ materially from those contemplated by the forward-looking statements due to a number of factors, including, without limitation, ongoing assessment of the incident, legal, reputational and financial risks resulting from the cybersecurity incident and the Company’s ability to adequately assess and remedy the incident, the effectiveness of the Company’s business continuity plans during the incident, the Company’s ability to recover under its cybersecurity insurance policies, and the other factors that are described in the section entitled “RISK FACTORS” in Item 1A of the Company’s most recent Annual Report on Form 10-K and later filings on Form 10-Q, as applicable. Forward-looking statements do not guarantee future performance and are only as of the date they are made. The Company undertakes no duty to update its forward-looking statements except as required by law. Undue reliance should not be placed on any forward-looking statements. You are advised to review any further disclosures the Company makes on related subjects in subsequent Forms 10-K, 10-Q, 8-K and other reports filed with the U.S. Securities and Exchange Commission.

Company Information