HackingRetail & ConsumerRetailStolen CredentialsDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDPIIMediumContained

LENNAR CORPORATION

bd_a0bd7220acdaea8e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 20, 2023

Filed

Oct 10, 2023

To disclose

12 weeks

Affected

594state residents only

Linked

6 filings

Confidence

69%

Full breach record for LENNAR CORPORATION →2 incidents on file

Lennar Corporation reported a cybersecurity incident to the Washington Attorney General. Unauthorized access occurred between July 20 and August 11, 2023, affecting personal information of 594 Washington residents. The company notified law enforcement, engaged cybersecurity experts, and offered 24 months of credit monitoring. The incident was contained by October 2023.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d12 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 12 weeks / 82 days

Jul 20, 2023

Begins

Jul 20, 2023

Discovered

Oct 10, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

California State AGbd_07c33c899d2943882023-10-10Verified
Oregon State AGbd_133dcb4e5b51f6b12023-10-10Candidate
Massachusetts State AGbd_58c14dd26df9acf62023-10-10Verified
Maine State AGbd_f409ca017f0738d72023-10-10Verified

Show 1 more filing ↓up to 6d gap

Indiana State AGbd_c35383142f9bd8f32023-10-04 · +6dVerified

Name: LENNAR CORPORATION
norm: lennar

Name: LENNAR CORPORATION
norm: lennar
Industry: Retail & Consumerllm

Discovered: Jul 20, 2023
Breach occurred: Jul 20, 2023 – Aug 11, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 4, 2023
Affected individuals: 594state-resident count only
Data types: PIIIdentity (basic)
Data elements: NameSocial Security numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified U.S. law enforcement
Initial access: valid_credentials

During the incident: Took protective actions to stop any unauthorized access
Notified U.S. law enforcement
Launched an investigation with the assistance of leading cybersecurity experts
Offering you a 24-month membership in the Experian IdentityWorksSM credit monitoring and identity restoration program
Changes made: Deploy the level of robust security protocols, continuous monitoring, and staff training needed to prevent and defend against sophisticated cybersecurity threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(82 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGOct 4 · first

California State AG+6d

Oregon State AG+6d

Massachusetts State AG+6d

Maine State AG+6d

Washington State AG+6d · this page

Pattern: first filing Oct 4 (IN), last Oct 10 (WA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA26746.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2023
Raw hash: 15f7400ac20d817784305d12e5b99c84a2cac8f5504ebb51cc5141af073221ea

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityLENNAR CORPORATION

Victim entityLENNAR CORPORATION

Incidentdiscovered Jul 20, 2023

Stated responseTook protective actions to stop any unauthorized access

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com