HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDHigh

The National Association of Home Builders

bd_cde12f17e57692d9 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 7, 2024

Filed

Mar 1, 2024

To disclose

23 days

Affected · nationwide

2,0207 in this filing

Linked

6 records

Confidence

65%

Full breach record for The National Association of Home Builders →

The National Association of Home Builders ("NAHB") reported an external system breach that occurred on May 16, 2023, and was discovered on February 7, 2024. The incident affected 2,020 individuals, compromising names and Social Security Numbers. NAHB began notifying affected individuals on February 16, 2024, and offered 12 months of identity theft protection and credit monitoring services through TransUnion.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d23 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 267 days

discovery → filing · 23 days

May 16, 2023

Begins

Feb 7, 2024

Discovered

Mar 1, 2024

Filed

vs. sector median

16 wks faster

This filing is one of 6 records about the same incident.View merged incident

A leak claim by akira about this victim was first seen 276 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_482afc9f9eed6cac2023-05-30 · +276dVerified by operator

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_4cc7e49d3b839dde2024-03-01Verified by operator
Vermont State AGbd_854c27ea357c74502024-02-29 · +1dCandidate
New Hampshire State AGbd_b7b7dfc373dd19792024-03-05 · +4dVerified
Indiana State AGbd_51d1a96330e36e262024-02-16 · +14dVerified

Name: The National Association of Home Builders
norm: the national association of home builders
Domain: nahb.org

Name: The National Association of Home Builders
norm: the national association of home builders
Domain: nahb.org
Industry: Professional Servicesllm

Discovered: Feb 7, 2024
Breach occurred: May 16, 2023
Undetected for: 267 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2024
Affected individuals: 2,020state + nationwide
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Sent written notification to affected individuals.
Changes made: Offered 12 months of identity theft protection and credit monitoring services through TransUnion.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: Leak >180dME AG ≤30d · 23d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 7, 2024
→ Filed with AG: Mar 1, 2024
23d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 7, 2024 → Filed with AG: Mar 1, 2024	23d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGFeb 16 · first

Vermont State AG+13d

Massachusetts State AG+14d

Maine State AG+14d · this page

New Hampshire State AG+18d

Pattern: first filing Feb 16 (IN), last Mar 5 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/daa155f6-fbfd-47ef-bb26-4a8b4fc02d7d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 1, 2024
Raw hash: 47d67fe469ccec6a5c0246d8339bc712f60ed7b97efc10068fd36f09567d19c0

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityThe National Association of Home Builders

Victim entityThe National Association of Home Builders

Incidentdiscovered Feb 7, 2024

Stated responseSent written notification to affected individuals.

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov