HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Sierra Construction Company

bd_1eaa549e5a10dd26 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 14, 2024

Filed

Oct 30, 2024

To disclose

11 weeks

Affected

17state residents only

Linked

3 filings

Confidence

67%

Full breach record for Sierra Construction Company →

Sierra Construction Company notified Montana residents of a cybersecurity incident discovered on August 14, 2024. The breach impacted current and former employees, exposing names, SSNs, DOBs, government IDs, and health insurance info. The company engaged legal counsel and forensic experts, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 77 days

Aug 14, 2024

Discovered

Oct 30, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Washington State AGbd_d9cad3f86323fcc02024-10-30Verified
Massachusetts State AGbd_f657e8c6c1cecd702024-10-30Verified

Name: Sierra Construction Company
norm: sierra construction

Name: Sierra Construction Company
norm: sierra construction
Industry: Manufacturingllm

Discovered: Aug 14, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 17state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Initiated measures to secure the information we maintain
Engaged the services of outside legal counsel
Engaged external cybersecurity experts to investigate the nature and scope of the incident
Investigated to determine what information was involved
Offering affected individuals with 12 months of complimentary access to Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Washington State AGOct 30 · first

Massachusetts State AGOct 30 · first

Montana State AGOct 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2024/11/Consumer-notification-letter-10.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2024
Raw hash: d0b842669ec7c7da21d584e219a32e5aa349fae812b5daa5840b02cf1078ec64

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySierra Construction Company

Victim entitySierra Construction Company

Incidentdiscovered Aug 14, 2024

Stated responseInitiated measures to secure the information we maintain

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov