HackingConstructionConstructionStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

SHOOK CONSTRUCTION CO.

bd_6daaeb6aab8863b0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 2, 2020

Filed

Feb 19, 2021

To disclose

24 weeks

Affected

3state residents only

Linked

2 filings

Confidence

67%

Full breach record for SHOOK CONSTRUCTION CO. →

Shook Construction Co. detected suspicious activity on September 2, 2020, leading to the discovery that several business email accounts were compromised by an unauthorized third party. Potential exposure included names, addresses, dates of birth, driver's licenses, and social security numbers for three New Hampshire residents. The company engaged forensic specialists, secured accounts, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 weeks / 170 days

Sep 2, 2020

Discovered

Feb 19, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_a31e6174e398d0612021-02-18 · +1dVerified

Name: SHOOK CONSTRUCTION CO.
norm: shook construction

Name: SHOOK CONSTRUCTION CO.
norm: shook construction
Industry: Constructionllm

Discovered: Sep 2, 2020
Materiality determined: —
Notification sent: Feb 18, 2021
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Engaged third-party forensic specialists to assist in analysis
Secured the compromised email accounts
Confirmed the security of SCC’s network environment
Offered free credit monitoring and identity theft protection through IDX
Changes made: Reviewed and altered policies and procedures relating to the security of systems and servers
Reviewed and altered information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(170 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 18 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/shook-construction-20210219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 19, 2021
Raw hash: cd5516513d4a48ce3dfe613896759a04b804554899b5c6610d55ca1bbd1e6085

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySHOOK CONSTRUCTION CO.

Victim entitySHOOK CONSTRUCTION CO.

Incidentdiscovered Sep 2, 2020

Stated responseEngaged third-party forensic specialists to assist in analysis

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov