Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PIIIDENTITY_GOVERNMENTEMPLOYMENTMediumResolved
Whiting-Turner Contracting Company
bd_2c42d96ebd9d0696 · schema v1 · pii pii-v1
Full breach record for Whiting-Turner Contracting Company →The Whiting-Turner Contracting Company reported a security breach in New Hampshire involving a third-party tax preparation vendor. An employee was targeted by a phishing attack on March 6, 2016, leading to the disclosure of W-2 information. The breach affected one New Hampshire resident, exposing names, Social Security numbers, and wage details. The company notified the NH DOJ on April 6, 2016, and offered credit monitoring to the affected individual.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6fa25983a274368aCalifornia State AGfiled 2016-04-06Verified
- bd_965115db0713961fMontana State AGfiled 2016-04-06Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/whiting-turner-20160406.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2016
- Raw hash
- 12ad163830e9aa4e2df7ed00f574d2ba970f80d9cf00170acf2eb02ba1a5eedf
Reporting entity
- Name
- Whiting-Turner Contracting Companynorm: whiting turner contracting
- Domain
- whiting-turner.com
Victim entity
- Name
- Whiting-Turner Contracting Companynorm: whiting turner contracting
- Domain
- whiting-turner.com
Incident
- Discovered
- Mar 8, 2016
- Materiality determined
- —
- Notification sent
- Apr 6, 2016
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with New Hampshire Department of Justice
- Initial access
- phishing_link
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.