Social EngineeringManufacturingConstructionManufacturingPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)CredentialsLowContained

Ellingson Holdings

bd_5c2ed04f129f7c82 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 24, 2024

Filed

Jul 10, 2024

To disclose

24 weeks

Affected

2state residents only

Confidence

65%

Full breach record for Ellingson Holdings →

Ellingson Companies reported unauthorized access to employee email accounts between Dec 23, 2023 and Jan 27, 2024, detected on Jan 24, 2024. The incident involved phishing leading to credential compromise and email data collection. Personal information of affected individuals was accessed. Ellingson engaged forensic investigators and offered Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 32 days

discovery → filing · 24 weeks / 168 days

Dec 23, 2023

Begins

Jan 24, 2024

Discovered

Jul 10, 2024

Filed

vs. sector median

+13 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Ellingson Holdings
norm: ellingson holdings

Name: Ellingson Holdings
norm: ellingson holdings
Also named: Ellingson Holdings & ECI Contracting and Ellingson Drainage, Incoperating subsidiary ofholding company
Industry: ManufacturingllmConstructionllm

Discovered: Jan 24, 2024
Breach occurred: Dec 23, 2023 – Jan 27, 2024
Undetected for: 32 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Contained the incident
Engaged third-party cybersecurity professionals
Conducted an extensive manual review of the affected data
Secured the services of Kroll to provide identity monitoring
Changes made: Continually evaluate and modify practices and internal controls to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(168 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1535.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2024
Raw hash: adfc343545440135a8ef9f34797512408dd09f30ca35ac707f9b307aa4741b1a

Reporting entityEllingson Holdings

Victim entityEllingson Holdings

Incidentdiscovered Jan 24, 2024

Stated responseContained the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov