HackingData ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumActive
OHL North America
bd_91153bd854427ec7 · schema v1 · pii pii-v1
Full breach record for OHL North America →OHL North America disclosed that a third party accessed its systems between March 18 and April 8, 2021, and exfiltrated employee files containing names, addresses, SSNs, and bank account information. The incident was discovered in the week of March 14, 2021. OHL engaged a third-party consultant, reported to law enforcement, and is providing 24 months of credit monitoring to affected employees. The investigation is ongoing.
California clockDiscovered Mar 14, 2021 → Notified May 4, 202151d ✓ CA 60-day OK7 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cb35e2db690fd77cMaine State AGfiled 2021-05-03Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-540478
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 3, 2021
- Raw hash
- 9929d960289ff6000d9b5a57d4d1d704a3e860c9644ba95e3c23c1e089d30153
Reporting entity
- Name
- OHL North Americanorm: ohl north america
Victim entity
- Name
- OHL North Americanorm: ohl north america
Incident
- Discovered
- Mar 14, 2021
- Materiality determined
- —
- Notification sent
- May 4, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 51d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 14, 2021→ Notified: May 4, 202151d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.