PhysicalConstructionConstructionTheftEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

The Hallen Construction Company, Inc.

bd_11e0489e420c8d6c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 17, 2020

Filed

Apr 14, 2020

To disclose

28 days

Affected · nationwide

41 in this filing

Confidence

66%

Full breach record for The Hallen Construction Company, Inc. →

The Hallen Construction Company, Inc. reported the theft of a laptop containing employment records for present and former employees. The incident occurred on March 17, 2020, and was discovered the same day. Affected data includes names, addresses, Social Security numbers, dates of birth, and payroll/bank account information. A total of 4 individuals were affected: 1 in New Hampshire, 2 in California, and 1 in Rhode Island. The company notified law enforcement, initiated an investigation, and provided 24 months of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Mar 17, 2020

Begins

Mar 17, 2020

Discovered

Apr 14, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: The Hallen Construction Company, Inc.
norm: the hallen construction

Name: The Hallen Construction Company, Inc.
norm: the hallen construction
Industry: Constructionllm

Discovered: Mar 17, 2020
Breach occurred: Mar 17, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 14, 2020
Affected individuals: 4state + nationwide
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Department of Justice

During the incident: Notified law enforcement
Initiated an investigation
Arranged for ID Experts to provide identity protection services including credit monitoring at no charge to all affected individuals for twenty-four (24) months
Taken measures to confirm the security of personal information stored on other laptop computers used for Hallen business
Sending letters by U.S. mail to all affected individuals
Changes made: Taken measures to confirm the security of personal information stored on other laptop computers used for Hallen business
Continues to review available resources for any indication that the exposed information has been improperly accessed or misused
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hallen-construction-20200414.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2020
Raw hash: 5902829aeed4cfd83970de53387c5e2a381d7af6f3741da49be60b831bf497a7

Reporting entityThe Hallen Construction Company, Inc.

Victim entityThe Hallen Construction Company, Inc.

Incidentdiscovered Mar 17, 2020

Stated responseNotified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov