HackingOtherStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)LowContained

Alder Construction

bd_30393d8b379749f9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 17, 2024

Filed

Feb 7, 2025

To disclose

16 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Alder Construction →2 incidents on file

Alder Construction Company notified Montana residents of a cybersecurity incident where an unauthorized actor acquired limited personal information (names) between Oct 3-17, 2024. The company engaged third-party specialists, secured systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 16 weeks / 113 days

Oct 3, 2024

Begins

Oct 17, 2024

Discovered

Feb 7, 2025

Filed

vs. sector median

+10 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_66e834dbfdb989da2025-02-07Verified

Name: Alder Construction
norm: alder construction
Domain: alderconstruction.com

Name: Alder Construction
norm: alder construction
Domain: alderconstruction.com
Industry: Otherllm

Discovered: Oct 17, 2024
Breach occurred: Oct 3, 2024 – Oct 17, 2024
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the incident
Took immediate action to address and investigate the event
Secured our systems and enhance the security of our network
Arranged for you to enroll, at no cost to you, in an online credit monitoring service for 12 months
Changes made: Enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 7 · first

Montana State AGFeb 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/03/Consumer-notification-letter-188.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2025
Raw hash: 1360d25cb5a86caf2ab4dbacab53566273d3c04b07409d173d2777a0609bb350

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAlder Construction

Victim entityAlder Construction

Incidentdiscovered Oct 17, 2024

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov