HackingConstructionConstructionStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Hoffman

bd_ab761a0f46ec612d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 3, 2020

Filed

Sep 30, 2020

To disclose

8 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Hoffman →

Hoffman Construction Company notified employees of a data security incident discovered on August 3, 2020. An unauthorized individual accessed personnel files containing names, addresses, and Social Security numbers. The company engaged forensic investigators and offered one year of Experian IdentityWorks to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Aug 3, 2020

Discovered

Sep 30, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Hoffman
norm: hoffman
Domain: hoffman-hoffman.com

Name: Hoffman
norm: hoffman
Domain: hoffman-hoffman.com
Industry: Constructionllm

Discovered: Aug 3, 2020
Materiality determined: —
Notification sent: Sep 20, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged an independent computer forensic firm
Engaged a document review vendor
Offered complimentary one-year membership of Experian’s IdentityWorks
Changes made: Implemented additional measures and changes to enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Hoff-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2020
Raw hash: 1dd8eec0712515119f399dd65e5ae31a11c1f6ebf647030b638b8567214f4a64

Reporting entityHoffman

Victim entityHoffman

Incidentdiscovered Aug 3, 2020

Stated responseEngaged an independent computer forensic firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov