HackingData ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTEMPLOYMENTMediumActive
Dome Construction Corporation
bd_2fac83ae8aef0fc8 · schema v1 · pii pii-v1
Full breach record for Dome Construction Corporation →Dome Construction Corporation notified California residents of an unauthorized access incident occurring between October 19-20, 2024. An external actor accessed IT systems and copied employee records containing names, addresses, SSNs, health info, and direct deposit details. The investigation is ongoing. The company engaged external specialists, notified federal law enforcement, and is offering 24 months of credit monitoring via Experian.
Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_40ad67c2749a82e5Montana State AGfiled 2024-11-22Verified
- bd_47569d00c4b89ba3Maine State AGfiled 2024-11-22Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-595283
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 22, 2024
- Raw hash
- 90b453808ba3a8d19daac4c1586688b83a47add21e695abd5fc9d02a995af02f
Reporting entity
- Name
- Dome Construction Corporationnorm: dome construction
- Domain
- domebuilds.com
Victim entity
- Name
- Dome Construction Corporationnorm: dome construction
- Domain
- domebuilds.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Nov 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reporting the incident to federal law enforcement
Compliance
- Compliance flags
- Leak >30d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.