HackingOtherData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

W. L. French Excavating Corporation

bd_01e19ea801d33729 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 27, 2021

Filed

Nov 29, 2021

To disclose

5 weeks

Affected

136state residents only

Linked

3 filings

Confidence

67%

Full breach record for W. L. French Excavating Corporation →

W. L. French Excavating Corporation notified the NH AG of a data event affecting 136 NH residents. On Oct 27, 2021, law enforcement alerted the company to suspicious activity. Unauthorized access to systems containing names, SSNs, driver's licenses, and financial account info was confirmed. Notices sent Nov 22, 2021. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 33 days

Oct 27, 2021

Discovered

Nov 29, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_e02f1aa6f97510cf2021-11-23 · +6dVerified
Maine State AGbd_e3ad81516bc81fa22021-11-22 · +7dCandidate

Name: W. L. French Excavating Corporation
norm: w l french excavating

Name: W. L. French Excavating Corporation
norm: w l french excavating
Industry: Otherllm

Discovered: Oct 27, 2021
Materiality determined: —
Notification sent: Nov 22, 2021
Affected individuals: 136state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Immediately shut down the company network
Launched an investigation
Working with third-party forensic investigators and law enforcement
Providing written notice of this incident to affected individuals
Providing access to credit monitoring services for two (2) years, through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Working to implement additional safeguards and training to its employees
Reviewing our existing policies and procedures regarding data privacy
Evaluating additional measures and safeguards to protect against this type of incident in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGNov 22 · first

Massachusetts State AG+1d

New Hampshire State AG+7d · this page

Pattern: first filing Nov 22 (ME), last Nov 29 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/w-l-french-excavating-20211129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2021
Raw hash: dc372a3feb7657c2be320607959fb95a42f9e2277055e76e9a17f42ee4d551d4

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityW. L. French Excavating Corporation

Victim entityW. L. French Excavating Corporation

Incidentdiscovered Oct 27, 2021

Stated responseImmediately shut down the company network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov