HackingManufacturingManufacturingDelayed DiscoveryIdentity (basic)Government IDMediumActive

Gage Brothers Concrete Products, Inc.

bd_b25588b75d13eb07 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 13, 2022

Filed

Aug 8, 2022

To disclose

8 weeks

Affected

2state residents only

Linked

7 filings

Confidence

65%

Full breach record for Gage Brothers Concrete Products, Inc. →

Gage Brothers Concrete Products, Inc. notified the NH AG of unauthorized access to systems between June 8-9, 2022, discovered June 13, 2022. Data involved names, SSNs, and driver's licenses of 2 NH residents. Investigation ongoing. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 8 weeks / 56 days

Jun 8, 2022

Begins

Jun 13, 2022

Discovered

Aug 8, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_06c6082da2e072392022-08-02 · +6dVerified
Maine State AGbd_8411e3f27dd2aace2022-08-02 · +6dVerified
Massachusetts State AGbd_c75d80f66efc45052022-08-02 · +6dVerified
Maine State AGbd_eb58a24f00f545de2022-08-02 · +6dVerified

Show 2 more filings ↓up to 29d gap

Montana State AGbd_54a1deefe5f056a72022-08-01 · +7dCandidate
New Hampshire State AGbd_333f5e964668b7022022-09-06 · +29dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Gage Brothers Concrete Products, Inc.
norm: gage brothers concrete products
Industry: Manufacturingllm

Discovered: Jun 13, 2022
Breach occurred: Jun 8, 2022 – Jun 9, 2022
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 2, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notice of Data Event filed with New Hampshire Attorney General Consumer Protection Bureau

During the incident: Initiated an investigation to determine the full nature and scope of the event
Notified law enforcement
Reviewing existing policies and procedures
Implementing additional safeguards to further secure the information in its systems
Providing access to credit monitoring services for twelve (12) months, through Equifax
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulatory authorities
Notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Reviewing existing policies and procedures
Implementing additional safeguards to further secure the information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Montana State AGAug 1 · first

Indiana State AG+1d

Maine State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+7d · this page

New Hampshire State AG+36d

Pattern: first filing Aug 1 (MT), last Sep 6 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gage-brothers-concrete-products-20220808.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2022
Raw hash: dfa51c6a6d17ee171ce156db117bbba36d1e7095b8fd3776869aa16ce4be91a1

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityGage Brothers Concrete Products, Inc.

Incidentdiscovered Jun 13, 2022

Stated responseInitiated an investigation to determine the full nature and scope of the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov