HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

Jensen Enterprises, Inc.

bd_a90c38d9211cc103 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2018

Filed

Jan 11, 2019

To disclose

11 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Jensen Enterprises, Inc. →

Jensen Enterprises, Inc. d/b/a Jensen Precast notified the California Attorney General of a data breach where an unauthorized individual accessed employee email accounts. The incident was discovered on October 25, 2018, with the breach occurring on August 23, 2018. Affected data may include names, addresses, financial account information, Social Security numbers, driver's license numbers, and passport numbers. The company engaged forensic investigators, secured accounts, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 63 days

discovery → filing · 11 weeks / 78 days

Aug 23, 2018

Begins

Oct 25, 2018

Discovered

Jan 11, 2019

Filed

vs. sector median

on median

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e58689d21c487cff2019-01-11Verified

Name: Jensen Enterprises, Inc.
norm: jensen enterprises

Name: Jensen Enterprises, Inc.
norm: jensen enterprises
Also named: Jensen Enterprises, Inc.dba oflegal entity
Jensen Precastdba oftrade name
Industry: Manufacturingllm

Discovered: Oct 25, 2018
Breach occurred: Aug 23, 2018
Undetected for: 63 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Reported the matter to the Federal Bureau of InvestigationReported the matter to local law enforcement
Initial access: valid_credentials

During the incident: Launched an investigation
Secured all employee email accounts
Engaged a digital forensics firm
Reported the matter to the Federal Bureau of Investigation
Reported the matter to local law enforcement
Changes made: Implemented additional safeguards to minimize the chance that an incident like this could occur in the future
Offering twelve (12) months of credit and identity monitoring services at no cost through TransUnion Interactive
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(78 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJan 11 · first

California State AGJan 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-143760
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 11, 2019
Raw hash: a41252961979b6a939fcae6afcab052e193afb7e70024f1b8351155406811371

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJensen Enterprises, Inc.

Victim entityJensen Enterprises, Inc.

Incidentdiscovered Oct 25, 2018

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov