HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
CORNERSTONE BUILDING BRANDS, INC.
bd_387bdc6cec92f206 · schema v1 · pii pii-v1
Full breach record for CORNERSTONE BUILDING BRANDS, INC. →Cornerstone Building Brands, Inc. reported a data breach in California where an unauthorized person accessed two employees' email accounts between April 1 and April 2, 2019. The incident involved the potential viewing of emails and attachments containing personal information. The company engaged a cybersecurity firm, secured the accounts, and offered one year of complimentary identity monitoring services through Kroll to affected individuals.
California clockDiscovered Apr 2, 2019 → Notified Aug 16, 2019136d ✗ CA 60-day late23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c14cf158c86f1770Montana State AGfiled 2019-09-11Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-150471
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2019
- Raw hash
- fd1e5d1cc7039c3fc2fd5859de5f9970ba0827b19c257e656e03131e281c16a4
Reporting entity
- Name
- CORNERSTONE BUILDING BRANDS, INC.norm: cornerstone building brands
Victim entity
- Name
- CORNERSTONE BUILDING BRANDS, INC.norm: cornerstone building brands
Incident
- Discovered
- Apr 2, 2019
- Materiality determined
- —
- Notification sent
- Aug 16, 2019
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- CA 60-day late · 136d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 2, 2019→ Notified: Aug 16, 2019136d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.