Social EngineeringRetail & ConsumerRetailPhishingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

BEACON SALES ACQUISITION, INC.

bd_9e5840e9c1f24ee0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 1, 2023

To disclose

—

Affected

1state residents only

Confidence

64%

Full breach record for BEACON SALES ACQUISITION, INC. →2 incidents on file

Beacon Sales Acquisition, Inc., a distributor of residential and commercial roofing materials, notified the NH Attorney General of a phishing scam that resulted in unauthorized access to an employee's email account on December 3, 2018. The incident potentially exposed personal information, including names, dates of birth, and passport numbers, of one New Hampshire resident. The company blocked access, conducted a forensic review, and offered one year of credit monitoring and identity theft insurance to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 3, 2018

Begins

Mar 1, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: BEACON SALES ACQUISITION, INC.
norm: beacon sales acquisition

Name: BEACON SALES ACQUISITION, INC.
norm: beacon sales acquisition
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Dec 3, 2018
Materiality determined: —
Notification sent: Mar 7, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566 PhishingT1114 Email Collection
Threat actor: External
Regulator citations: Notified Attorney General Gordon MacDonald of New Hampshire
Initial access: phishing_link

During the incident: Blocked the unauthorized access
Investigated the incident thoroughly in order to determine the full nature and scope of the access
Identified measures to improve our IT security
Identified what information may have been at risk through a very tedious hand-review process
Offering one (1) year of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Identified measures to improve our IT security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/beacon-sales-acquisition-20190308.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 1, 2023
Raw hash: df9aa786050f63526c271bfbaed4eb97eb7b231fca2d2254d3bc085e74498a29

Reporting entityBEACON SALES ACQUISITION, INC.

Victim entityBEACON SALES ACQUISITION, INC.

IncidentPhishing

Stated responseBlocked the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov