HackingConstructionConstructionStolen CredentialsEmployee Data InvolvedTargetedIdentity (basic)Government IDEmploymentMediumActive

Vantage Builders

bd_8dff72502ed265cf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 22, 2022

Filed

Mar 7, 2022

To disclose

13 days

Affected

4state residents only

Confidence

66%

Full breach record for Vantage Builders →3 incidents on file

Vantage Builders, Inc. reported a data security incident on Feb 22, 2022, involving unauthorized acquisition of employees' 2021 W-2 forms. Impacted data included names, SSNs, addresses, and earnings. 4 NH residents affected. Vantage engaged forensic specialists, notified the FBI and IRS, and provided 2 years of credit monitoring to impacted employees.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 days

Feb 22, 2022

Begins

Feb 22, 2022

Discovered

Mar 7, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Vantage Builders
norm: vantage builders
Domain: vb-inc.com

Name: Vantage Builders
norm: vantage builders
Domain: vb-inc.com
Industry: Constructionllm

Discovered: Feb 22, 2022
Breach occurred: Feb 22, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 28, 2022
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the IRSReported the incident to the state tax authoritiesReported the incident to the FBINotified the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Partnering with cyber security incident specialists
Reported the incident to the IRS, the state tax authorities, and the FBI
Provided written notice of the incident via U.S. regular mail to the impacted individuals
Provided employees with informal email notice of the incident and access to credit monitoring
Changes made: Offering all employees two (2) years of credit monitoring and identity restoration services at no charge from Epiq (through Experian)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/vantage-builders-20220307.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 7, 2022
Raw hash: bf4248e73beb76be3b47ee77e51096de2e1f69788e31a69e81bc6474c0bb1654

Reporting entityVantage Builders

Victim entityVantage Builders

Incidentdiscovered Feb 22, 2022

Stated responsePartnering with cyber security incident specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov