HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)MediumContained

Builders Insurance (A Mutual Captive Company)

bd_280db72dd5ce2847 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 14, 2022

Filed

Oct 2, 2023

To disclose

42 weeks

Affected

2,601state residents only

Linked

9 filings

Confidence

64%

Full breach record for Builders Insurance (A Mutual Captive Company) →

Builders Mutual Insurance Company notified South Carolina regulators of unauthorized network access discovered on Dec 14, 2022. Files were copied on Dec 15, 2022. Affected data included names. The company engaged third-party specialists, notified law enforcement, and offered credit monitoring. Notification sent Dec 28, 2023.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due42 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 42 weeks / 292 days

Dec 14, 2022

Begins

Dec 14, 2022

Discovered

Oct 2, 2023

Filed

vs. sector median

+32 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_00e6bd7a5cc86b962023-09-29 · +3dCandidate
Massachusetts State AGbd_138f9684708cce5d2023-09-29 · +3dVerified
Indiana State AGbd_363113389f0aaacc2023-09-29 · +3dVerified
New Hampshire State AGbd_7d6454372ca3b6442023-09-29 · +3dVerified

Show 4 more filings ↓up to 87d gap

Vermont State AGbd_aa63b02d952af4522023-09-29 · +3dVerified
Montana State AGbd_ab2cf2fa582e4a202023-09-29 · +3dVerified by operator
New Hampshire State AGbd_3054d507945b13612023-10-19 · +17dVerified
Maine State AGbd_3e5b41cd274c8bdf2023-12-28 · +87dVerified

Name: Builders Insurance (A Mutual Captive Company)
norm: builders insurance a mutual captive

Name: Builders Insurance (A Mutual Captive Company)
norm: builders insurance a mutual captive
Industry: Financial Servicesllm

Discovered: Dec 14, 2022
Breach occurred: Dec 14, 2022 – Dec 15, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 28, 2023
Affected individuals: 2,601state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: reported this incident to law enforcement
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of third-party specialists
Reported this incident to law enforcement
Taken steps to implement additional safeguards and review policies and procedures relating to data privacy and security
Offering you complimentary access to ## months of credit monitoring and identity theft restoration services through Experian
Changes made: Implement additional safeguards and review policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(292 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Maine State AGSep 29 · first

Massachusetts State AGSep 29 · first

Indiana State AGSep 29 · first

New Hampshire State AGSep 29 · first

Vermont State AGSep 29 · first

Montana State AGSep 29 · first

South Carolina State AG+3d · this page

New Hampshire State AG+20d

Maine State AG+90d

Pattern: first filing Sep 29 (ME), last Dec 28 (ME) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/BuildersMutualInsuranceCompany122923.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 2, 2023
Raw hash: 4da4407f9e00d64c914e00366cb77a1b7fa14710e024330ac60ca7dca997feff

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityBuilders Insurance (A Mutual Captive Company)

Victim entityBuilders Insurance (A Mutual Captive Company)

Incidentdiscovered Dec 14, 2022

Stated responseLaunched an investigation with the assistance of third-party specialists

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov