AccidentalConstructionConstructionMisdeliveryEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDEmploymentFinancialMediumContained

Turner Construction Company

bd_0d83b48751a29ebe · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 2, 2016

Filed

Mar 7, 2016

To disclose

5 days

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Turner Construction Company →4 incidents on file

On March 2, 2016, Turner Construction Company disclosed personal information in an email to an unauthorized recipient. The data included full name, Social Security number, state wage/tax reporting info, and federal/state/local/Medicare earnings and tax withholding data. Turner engaged third-party experts, notified law enforcement and the IRS, and offered 10 years of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 days

Mar 2, 2016

Begins

Mar 2, 2016

Discovered

Mar 7, 2016

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Washington State AGbd_26743f1f6245ddc42016-03-07Candidate
Montana State AGbd_1e2a8327ec4eb6a52016-03-08 · +1dVerified
Massachusetts State AGbd_b7113fa07988a1022016-03-10 · +3dVerified

Name: Turner Construction Company
norm: turner construction

Name: Turner Construction Company
norm: turner construction
Industry: Constructionllm

Discovered: Mar 2, 2016
Breach occurred: Mar 2, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmploymentFinancial
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified federal, state and local law enforcementProvided the data that was disclosed to the Internal Revenue Service

During the incident: Immediately began investigating
Engaged third party experts to assist with this response
Notified federal, state and local law enforcement of this incident
Consulting with legal, law enforcement, information technology and security experts
Provided the data that was disclosed to the Internal Revenue Service
Secured the services of Kroll to provide identity monitoring
Changes made: Follow recommendations to protect the affected persons and to ensure that this type of disclosure will not again occur
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 days(5 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Washington State AGMar 7 · first

California State AGMar 7 · first · this page

Montana State AG+1d

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-60340
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 7, 2016
Raw hash: 3817d72ce1bfd287e1df73c51a56c4ea16aae9616a9508622aab4ea209e1c365

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTurner Construction Company

Victim entityTurner Construction Company

Incidentdiscovered Mar 2, 2016

Stated responseImmediately began investigating

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov