HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)LowContained

BNBUILDERS, INC.

bd_4272e74e9357ee47 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 24, 2024

Filed

Nov 4, 2024

To disclose

15 weeks

Affected

97state residents only

Linked

6 filings

Confidence

65%

Full breach record for BNBUILDERS, INC. →

BNBuilders notified Montana residents of a data security incident occurring between July 17-24, 2024, discovered on July 24, 2024. The incident involved unauthorized access to personally identifiable information, including names. The company engaged third-party experts, notified law enforcement, augmented security practices, and offered 12 months of complimentary Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 15 weeks / 103 days

Jul 17, 2024

Begins

Jul 24, 2024

Discovered

Nov 4, 2024

Filed

vs. sector median

4 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitehunters_internationalbd_affc20dfe9f26f402024-10-05 · +30dVerified by operator
Leak Sitehunters_internationalbd_b87c86c24963dda82024-07-24 · +103dVerified

Regulatory filings (3) · sorted by filing gap

Washington State AGbd_43e2e6d7cb51caac2024-11-01 · +3dVerified
Massachusetts State AGbd_ed4bd71ac183242b2024-11-01 · +3dVerified by operator
California State AGbd_016dacab17d6bcf92024-10-31 · +4dVerified

Name: BNBUILDERS, INC.
norm: bnbuilders
Domain: bnbuilders.com

Name: BNBUILDERS, INC.
norm: bnbuilders
Domain: bnbuilders.com
Industry: Technologyllm

Discovered: Jul 24, 2024
Breach occurred: Jul 17, 2024 – Jul 24, 2024
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 97state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement of the Incident

During the incident: Took immediate steps to secure our systems and investigate the nature and scope of the Incident
Notified law enforcement of the Incident
Augmented our security practices to minimize the risk of a similar incident occurring in the future
Offering you a chance to enroll in complimentary access to Experian IdentityWorks for 12 months
Changes made: Augmented our security practices to minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(103 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGOct 31 · first

Washington State AG+1d

Massachusetts State AG+1d

Montana State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2024/11/Consumer-notification-letter-18.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 4, 2024
Raw hash: b04927b88789cfbe55d8f974b949440b1d53e4610cd30c5aee2c6f2fe84e6d83

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityBNBUILDERS, INC.

Victim entityBNBUILDERS, INC.

Incidentdiscovered Jul 24, 2024

Stated responseTook immediate steps to secure our systems and investigate the nature and scope of the Incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov