HackingRetail & ConsumerRetailStolen CredentialsTargetedIdentity (basic)Financial accountCredentialsAuthenticationMediumContained

Ashton Woods Homes

bd_c3bf3cd9b6c2705c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 21, 2019

Filed

Sep 26, 2019

To disclose

14 weeks

Affected · nationwide

1,9261 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Ashton Woods Homes →

Ashton Woods Homes notified 1,926 individuals of a security incident where unauthorized access to employee email accounts occurred between April 8 and June 21, 2019. The incident may have exposed passport numbers, financial account info, credit card numbers, and credentials. A cybersecurity firm was engaged, and security enhancements were implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 74 days

discovery → filing · 14 weeks / 97 days

Apr 8, 2019

Begins

Jun 21, 2019

Discovered

Sep 26, 2019

Filed

vs. sector median

+6 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_e0814bb810b915452019-09-30 · +4dVerified

Name: Ashton Woods Homes
norm: ashton woods homes

Name: Ashton Woods Homes
norm: ashton woods homes
Industry: Retail & Consumerllm

Discovered: Jun 21, 2019
Breach occurred: Apr 8, 2019 – Jun 21, 2019
Undetected for: 74 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 19, 2019
Affected individuals: 1,926state + nationwide
Data types: Identity (basic)Financial accountCredentialsAuthentication
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure the accounts
Launched an investigation
Engaged a cyber security firm to assist in determining what information may have been viewed
Conducted a comprehensive search of the messages stored in the accounts
Changes made: Implemented additional security enhancements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGSep 26 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2019
Raw hash: 9b49e84b38826723b827a2fe2583da7977a18ef1f7b8197a024cb78cf477b009

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAshton Woods Homes

Victim entityAshton Woods Homes

Incidentdiscovered Jun 21, 2019

Stated responseTook steps to secure the accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov