Social EngineeringConstructionConstructionPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)AuthenticationMediumContained

Brinkman Construction, Inc.

bd_9ccdbf0abe2647ed · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 17, 2020

Filed

Feb 10, 2021

To disclose

21 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Brinkman Construction, Inc. →2 incidents on file

Brinkman Construction, Inc. notified Montana residents of a data breach involving unauthorized access to employee email accounts via phishing. The incident exposed names, SSNs, driver's license numbers, financial account info, and medical data. The company engaged forensic investigators, secured accounts, notified the FBI, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 146 days

Sep 17, 2020

Discovered

Feb 10, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Brinkman Construction, Inc.
norm: brinkman construction

Name: Brinkman Construction, Inc.
norm: brinkman construction
Industry: Constructionllm

Discovered: Sep 17, 2020
Materiality determined: —
Notification sent: May 10, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)Authentication
Data elements: Social Security numberMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported to the Federal Bureau of Investigation
Initial access: phishing_link

During the incident: Engaged an independent cyber forensics firm
Secured the impacted email accounts
Reported the matter to the Federal Bureau of Investigation
Offered one year of complimentary credit monitoring through Kroll
Changes made: Took steps to ensure the security of our email environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(146 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/brinkSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 10, 2021
Raw hash: 4948fa71f94576f31b82f2557a6ac92445a7ad2c5fffb088e803c65980034295

Reporting entityBrinkman Construction, Inc.

Victim entityBrinkman Construction, Inc.

Incidentdiscovered Sep 17, 2020

Stated responseEngaged an independent cyber forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov