HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
InterCon Construction, Inc.
bd_07da051516d760a9 · schema v1 · pii pii-v1
Full breach record for InterCon Construction, Inc. →InterCon Construction, Inc. notified consumers of a cybersecurity incident where an unauthorized third party accessed systems between Nov 9-20, 2024. Personal information, including names and SSNs, may have been viewed. The company secured the network, notified federal law enforcement, and provided 12 months of credit monitoring via IDX.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by hunters_international about this victim predates this filing by 72 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_130aa61ef87a5c7cLeak Sitehunters_internationalfiled 2024-12-03(57d gap)Verified
- bd_5e8fadd8989ae7b9Leak Sitehunters_internationalfiled 2024-11-19(72d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_582a084eaf48919fMaine State AGfiled 2025-01-30Verified
- bd_a6ea95c84dce39c8Maryland State AGfiled 2025-01-30Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-30-intercon-construction-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2025
- Raw hash
- 83f3e3e584efcfbcf9262651f00dcc4a630e4b8a45b08363206351c957e78f4c
Reporting entity
- Name
- InterCon Construction, Inc.norm: intercon construction
- Domain
- intercon-const.com
Victim entity
- Name
- InterCon Construction, Inc.norm: intercon construction
- Domain
- intercon-const.com
Incident
- Discovered
- Nov 19, 2024
- Materiality determined
- Dec 6, 2024
- Notification sent
- Jan 30, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- prompt notification to federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.