Construction Supply Group
bd_5132501747f142c4 · schema v1 · pii pii-v1
Full breach record for Construction Supply Group →Construction Supply Group, a Denver-based construction supplier, notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to its network. The breach occurred between September 22, 2021, and January 17, 2022. The company determined on April 6, 2022, that files containing Social Security numbers, driver’s license numbers, and financial account information were accessed. One New Hampshire resident was affected. The company engaged a cybersecurity firm, notified law enforcement, and offered one year of credit monitoring through Equifax.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fb3584b8f32f66f3Montana State AGfiled 2022-05-06Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/construction-supply-20220506.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2022
- Raw hash
- d4f4249cce65dd3d54a29867b3026c9cafccf922c9117a861f149864f3af916a
Reporting entity
- Name
- BAKER & HOSTETLER LLPnorm: baker hostetler
Victim entity
- Name
- Construction Supply Groupnorm: construction supply
- Industry
- manufacturing
Incident
- Discovered
- Apr 6, 2022
- Materiality determined
- —
- Notification sent
- May 6, 2022
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.