HackingConstructionConstructionStolen CredentialsCapture App DataEmployee Data InvolvedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHealth (basic)PIIPHIFinancial accountFinancial credentialsAuthenticationCredentialsMediumContained

KPRS Construction Services

bd_05f3338a0ba7ca67 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 25, 2019

To disclose

—

Affected

Not disclosed

Confidence

78%

Full breach record for KPRS Construction Services →

KPRS Construction Services, Inc. experienced unauthorized access to employee email accounts during March–April 2019. The company learned of suspicious activity in late March 2019 and confirmed the compromise around June 14, 2019. Affected data included names, SSNs, driver's license numbers, health insurance/medical information, and for some individuals, payment card/bank account details and electronic account credentials. Notification letters were sent November 20, 2019.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 1, 2019

Begins

Nov 25, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: KPRS Construction Services
norm: kprs construction
Domain: kprsinc.com

Name: KPRS Construction Services
norm: kprs construction
Domain: kprsinc.com
Industry: Constructionllm

Discovered: —
Breach occurred: Mar 1, 2019 – Apr 29, 2019
Materiality determined: —
Notification sent: Nov 20, 2019
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)PIIPHIFinancial accountFinancial credentialsAuthenticationCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Changed the email account password to stop any unauthorized access
Hired computer forensics experts to assist with the investigation
Conducted a thorough review of the employees' email accounts to identify specific individuals whose personal information may have been in the impacted email accounts
Offering complimentary credit monitoring and identity protection services for one year through ID Experts' MyIDCare
Changes made: Taken measures to further enhance the security of personal information in our possession and to prevent similar incidents from happening in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-184651
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 25, 2019
Raw hash: ecc8b8f80df603add7026964f188c3a9aceb7cef96f5d57063e1f271b185aeeb

Reporting entityKPRS Construction Services

Victim entityKPRS Construction Services

IncidentUnauthorized Access

Stated responseChanged the email account password to stop any unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov