HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Builders Insurance (A Mutual Captive Company)
bd_3054d507945b1361 · schema v1 · pii pii-v1
Full breach record for Builders Insurance (A Mutual Captive Company) →Builders Mutual Insurance Company, an insurer for the construction industry, disclosed unauthorized network access beginning December 14, 2022, with files copied on December 15, 2022. The incident affected personal information of New Hampshire residents. The company engaged third-party specialists, notified law enforcement, and provided credit monitoring services via Experian to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_00e6bd7a5cc86b96Maine State AGfiled 2023-09-29(20d gap)Candidate
- bd_7d6454372ca3b644New Hampshire State AGfiled 2023-09-29(20d gap)Verified
- bd_aa63b02d952af452Vermont State AGfiled 2023-09-29(20d gap)Verified
- bd_ab2cf2fa582e4a20Montana State AGfiled 2023-09-29(20d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/builders-mutual-insurance-company-20231019.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 19, 2023
- Raw hash
- 43a6e693e80cc03a3703d5b6de7c081ff15972058b421cd71ac54a6289e90d7e
Reporting entity
- Name
- Builders Insurance (A Mutual Captive Company)norm: builders insurance a mutual captive
Victim entity
- Name
- Builders Insurance (A Mutual Captive Company)norm: builders insurance a mutual captive
Incident
- Discovered
- Dec 14, 2022
- Materiality determined
- Aug 1, 2023
- Notification sent
- Sep 29, 2023
- Affected individuals
- 7
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 44 weeks(309 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.