HackingConstructionConstructionStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Cast-Crete USA, LLC

bd_9f7d9f905b40364a · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 5, 2023

Filed

Dec 22, 2023

To disclose

37 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Cast-Crete USA, LLC →

Cast-Crete USA, Inc. detected suspicious activity in an email account on April 5, 2023. An investigation confirmed unauthorized access to one email account on that date. The investigation could not determine if specific emails or attachments were accessed. One New Hampshire resident was affected, with name and potentially other personal information involved. Cast-Crete implemented safeguards, provided credit monitoring, and notified regulators and credit bureaus.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 37 weeks / 261 days

Apr 5, 2023

Begins

Apr 5, 2023

Discovered

Dec 22, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_27eb7b2513b3b6be2023-12-22Verified

Name: Cast-Crete USA, LLC
norm: cast crete usa

Name: Cast-Crete USA, LLC
norm: cast crete usa
Industry: Constructionllm

Discovered: Apr 5, 2023
Breach occurred: Apr 5, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 22, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Provided written notice to relevant state regulatorsProvided written notice to the three major credit reporting agencies
Initial access: valid_credentials

During the incident: Took prompt steps to confirm the security of the email account
Launched an investigation to determine the nature and scope of the incident
Assessed the security of Cast-Crete systems
Identified potentially affected individuals
Providing access to credit monitoring services through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze
Providing written notice of this incident to relevant state regulators
Providing written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Implementing additional safeguards
Training its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(261 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGDec 22 · first

New Hampshire State AGDec 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cast-crete-usa-20231222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2023
Raw hash: b64e9cde91900e639f8b079833a062222c6b2c85cdd2049513949a93240fd044

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCast-Crete USA, LLC

Victim entityCast-Crete USA, LLC

Incidentdiscovered Apr 5, 2023

Stated responseTook prompt steps to confirm the security of the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov