HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained

EMJ Corporation

bd_470f4acbb0117284 · schema v1 · pii pii-v1

Full breach record for EMJ Corporation →

EMJ Corporation, a construction services firm, notified New Hampshire AG of a September 5, 2021 incident where an unauthorized actor used an admin account to exfiltrate data. 13 NH residents were affected, with potential exposure of W-2s and SSNs. EMJ engaged forensic experts, worked with the FBI, and provided 24 months of credit monitoring to affected individuals. Notifications were sent on September 27, 2021.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_f490187b08b5db96Maine State AGfiled 2021-10-08Verified
bd_05b53a4f62406132Montana State AGfiled 2021-09-27(11d gap)Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/emj-corporation-20211008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 8, 2021
Raw hash: 7414ceaa927dfb80fbe0ba0b5a8e65546ae99782d93366a92201131c03a58a41

Reporting entity

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Victim entity

Name: EMJ Corporation
norm: emj
Industry: construction

Incident

Discovered: Sep 5, 2021
Materiality determined: —
Notification sent: Sep 27, 2021
Affected individuals: 13
Data types: IDENTITY_GOVERNMENTIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

Compliance

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.