MalwareConstructionConstructionRansomwareCapture Stored DataData ExfiltratedData EncryptedIdentity (basic)Government IDFinancial accountMediumContained

W.L. Contractors

bd_279b0c231b375626 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 30, 2020

To disclose

—

Affected

3state residents only

Confidence

66%

Full breach record for W.L. Contractors →

W.L. Contractors experienced a ransomware attack between Feb 29 and Mar 3, 2020. Malware encrypted data and exfiltrated employee PII including names, SSNs, and bank account details. The company engaged law enforcement and a cybersecurity firm to contain the incident and strengthen defenses.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 29, 2020

Begins

Mar 30, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: W.L. Contractors
norm: wl contractors

Name: W.L. Contractors
norm: wl contractors
Industry: Constructionllm

Discovered: —
Breach occurred: Feb 29, 2020 – Mar 3, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: contacted law enforcement about this incident

During the incident: Technology professionals took steps to terminate the attack and restore its computer network
Contacted law enforcement about this incident
Engaged an outside cyber security firm to assist W.L. Contractors to help strengthen its defenses against similar attacks in the future
Changes made: Engaged an outside cyber security firm to assist W.L. Contractors to help strengthen its defenses against similar attacks in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-78.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2020
Raw hash: 85411390b23926092eaf868bf3e024abae5cfbc9086c3bedb88db1cf0d710bc5

Reporting entityW.L. Contractors

Victim entityW.L. Contractors

IncidentRansomware

Stated responseTechnology professionals took steps to terminate the attack and restore its computer network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov