Social EngineeringOtherPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

International Union of Bricklayers and Allied Craftworkers

bd_664236aa6e5fb5a0 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 29, 2020

Filed

Dec 30, 2020

To disclose

26 weeks

Affected

1,053state residents only

Linked

8 filings

Confidence

71%

Full breach record for International Union of Bricklayers and Allied Craftworkers →

International Union of Bricklayers and Allied Craftworkers notified Washington AG of a phishing incident affecting 1,053 residents. Unauthorized access to employee email accounts occurred June 4–July 10, 2020. Data exposed included names, SSNs, DOBs, and financial account numbers. Notices sent Dec 30, 2020.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d26 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 25 days

discovery → filing · 26 weeks / 184 days

Jun 4, 2020

Begins

Jun 29, 2020

Discovered

Dec 30, 2020

Filed

vs. sector median

+18 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_53e7c0f777fe53892020-12-30Verified
Indiana State AGbd_706781e7ac2857ee2020-12-30Verified
Maine State AGbd_b7d630ba17efc1092020-12-30Verified
California State AGbd_e65751d652e3e8642020-12-30Verified

Show 3 more filings ↓up to 12d gap

Oregon State AGbd_e9cdff756aefc5682020-12-30Verified
Montana State AGbd_f0252d7435c86f8a2020-12-30Verified
New Hampshire State AGbd_859bbe75d570626d2021-01-11 · +12dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: International Union of Bricklayers and Allied Craftworkers
norm: international union of bricklayers and allied craftworkers
Industry: Otherllm

Discovered: Jun 29, 2020
Breach occurred: Jun 4, 2020 – Jul 10, 2020
Undetected for: 25 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 30, 2020
Affected individuals: 1,053state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberFinancial account numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified state regulators, as required by law
Initial access: phishing_link

During the incident: Changed the passwords for the email accounts
Began an investigation with assistance from outside computer forensics specialists
Began an extensive review of the email accounts to determine whether they contained any sensitive information
Searched its internal records to locate the addresses for the potentially affected individuals
Notified potentially impacted individuals
Providing individuals potentially impacted by this event with complimentary access to credit monitoring services for twelve (12) months through TransUnion
Changes made: Reviewed existing policies and procedures
Implemented additional safeguards to further secure the information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(184 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Massachusetts State AGDec 30 · first

Indiana State AGDec 30 · first

Maine State AGDec 30 · first

California State AGDec 30 · first

Oregon State AGDec 30 · first

Montana State AGDec 30 · first

Washington State AGDec 30 · first · this page

New Hampshire State AG+12d

Pattern: first filing Dec 30 (MA), last Jan 11 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10193.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2020
Raw hash: 3604a0761eee9f4ac128d9418ef58e94033980f5780d41261cb3ce27309a23fb

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityInternational Union of Bricklayers and Allied Craftworkers

Incidentdiscovered Jun 29, 2020

Stated responseChanged the passwords for the email accounts

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com