UnknownManufacturingManufacturingEmployee Data InvolvedIdentity (basic)Government IDMedium

Gage Brothers Concrete Products, Inc.

bd_333f5e964668b702 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 13, 2022

Filed

Sep 6, 2022

To disclose

12 weeks

Affected

3state residents only

Linked

7 filings

Confidence

66%

Full breach record for Gage Brothers Concrete Products, Inc. →

Gage Brothers Concrete Products, Inc. identified suspicious system activity on June 13, 2022, leading to the discovery of unauthorized access to files between June 8 and June 9, 2022. The incident potentially affected the name, date of birth, and Social Security numbers of current and former employees and dependents. Three New Hampshire residents were notified. The company engaged third-party specialists, notified law enforcement, and is offering 12 months of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 12 weeks / 85 days

Jun 8, 2022

Begins

Jun 13, 2022

Discovered

Sep 6, 2022

Filed

vs. sector median

+1 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_b25588b75d13eb072022-08-08 · +29dVerified
Indiana State AGbd_06c6082da2e072392022-08-02 · +35dVerified
Maine State AGbd_8411e3f27dd2aace2022-08-02 · +35dVerified
Massachusetts State AGbd_c75d80f66efc45052022-08-02 · +35dVerified

Show 2 more filings ↓up to 36d gap

Maine State AGbd_eb58a24f00f545de2022-08-02 · +35dVerified
Montana State AGbd_54a1deefe5f056a72022-08-01 · +36dCandidate

Name: Gage Brothers Concrete Products, Inc.
norm: gage brothers concrete products

Name: Gage Brothers Concrete Products, Inc.
norm: gage brothers concrete products
Industry: Manufacturingllm

Discovered: Jun 13, 2022
Breach occurred: Jun 8, 2022 – Jun 9, 2022
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 2, 2022
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Providing written notice of this incident to relevant state regulatory authorities

During the incident: Initiated an investigation to determine the full nature and scope of the event
Notified law enforcement
Providing access to credit monitoring services for twelve (12) months, through Equifax, to individuals whose personal information was potentially affected by the event, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing written notice of this incident to relevant state regulatory authorities
Notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Reviewing existing policies and procedures
Implementing additional safeguards to further secure the information in its systems as appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Montana State AGAug 1 · first

Indiana State AG+1d

Maine State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+7d

New Hampshire State AG+36d · this page

Pattern: first filing Aug 1 (MT), last Sep 6 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gage-brothers-concrete-products-20220906.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 6, 2022
Raw hash: b0f2854c0017d1d4cb05dcde17a13781ae5084c7c631a72474afd755c4f78015

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityGage Brothers Concrete Products, Inc.

Victim entityGage Brothers Concrete Products, Inc.

Incidentdiscovered Jun 13, 2022

Stated responseInitiated an investigation to determine the full nature and scope of the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov