HackingGovernment IDMedium

CORNERSTONE BUILDING BRANDS, INC.

bd_3e6bb6a0d421c8b1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 21, 2021

Filed

May 21, 2021

To disclose

≤1 day

Affected · nationwide

4091 in this filing

Linked

3 filings

Confidence

50%

Full breach record for CORNERSTONE BUILDING BRANDS, INC. →3 incidents on file

Cornerstone Building Brands experienced an external system breach (hacking) on December 24, 2020, which was discovered on May 21, 2021. The breach affected one Maine resident, whose name and Social Security Number were compromised. The company offered one year of credit monitoring and identity theft protection services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 21, 2021 → Filed with AG May 21, 20210d ✓ ME AG ≤30d≤1 day discovery → filing

⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 148 days

discovery → filing · ≤1 day / 0 days

Dec 24, 2020

Begins

May 21, 2021

Discovered

May 21, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_4421f5071590feb42021-05-21Candidate
Indiana State AGbd_c75a17f9404c2c142021-05-21Verified

Name: CORNERSTONE BUILDING BRANDS, INC.
norm: cornerstone building brands

Name: CORNERSTONE BUILDING BRANDS, INC.
norm: cornerstone building brands

Discovered: May 21, 2021
Breach occurred: Dec 24, 2020
Undetected for: 148 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 21, 2021
Affected individuals: 409state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 1 year of credit monitoring and identity theft protection services through Kroll.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: ME AG ≤30d · 0d
Discovery-date grounding: notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 21, 2021
→ Filed with AG: May 21, 2021
0d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 21, 2021 → Filed with AG: May 21, 2021	0d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMay 21 · first

Indiana State AGMay 21 · first

Maine State AGMay 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/74349a67-665e-450c-bf57-97e92a1e698f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 21, 2021
Raw hash: 870d923e00d4ae95a7d879d9b701b7d94c09176a61c81829707cdb5334ee94db

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCORNERSTONE BUILDING BRANDS, INC.

Victim entityCORNERSTONE BUILDING BRANDS, INC.

Incidentdiscovered May 21, 2021

Stated responseOffered 1 year of credit monitoring and identity theft protection services through Kroll.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov