Social EngineeringManufacturingManufacturingPhishingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Turner Construction Company

bd_1e2a8327ec4eb6a5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 2, 2016

Filed

Mar 8, 2016

To disclose

6 days

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Turner Construction Company →4 incidents on file

Turner Construction Company disclosed that on March 2, 2016, personal information including names, SSNs, and tax withholding data was sent to an unauthorized recipient via email. The company engaged Kroll for 10 years of identity monitoring and notified law enforcement and the IRS. No addresses or DOBs were compromised.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 days

Mar 2, 2016

Begins

Mar 2, 2016

Discovered

Mar 8, 2016

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_0d83b48751a29ebe2016-03-07 · +1dVerified
Washington State AGbd_26743f1f6245ddc42016-03-07 · +1dCandidate
Massachusetts State AGbd_b7113fa07988a1022016-03-10 · +2dVerified

Name: Turner Construction Company
norm: turner construction

Name: Turner Construction Company
norm: turner construction
Industry: Manufacturingllm

Discovered: Mar 2, 2016
Breach occurred: Mar 2, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified federal, state and local law enforcementProvided the data that was disclosed to the Internal Revenue Service
Initial access: phishing_link

During the incident: Engaged third party experts to assist with this response
Notified federal, state and local law enforcement
Consulting with legal, law enforcement, information technology and security experts
Provided the data that was disclosed to the Internal Revenue Service
Secured the services of Kroll to provide identity monitoring
Changes made: Secured the services of Kroll to provide identity monitoring to you and your spouse or partner at no cost to you for ten years
Established a call center service so that you can speak with a live operator
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGMar 7 · first

Washington State AGMar 7 · first

Montana State AG+1d · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Turner-Construction-Company.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 8, 2016
Raw hash: 6e12b9b28f9dfe9de555d508074980d72cb4f5bd09a5c1bb7ec54ba76b7e88ea

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTurner Construction Company

Victim entityTurner Construction Company

Incidentdiscovered Mar 2, 2016

Stated responseEngaged third party experts to assist with this response

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov