DisclosureLens
HackingConstructionConstructionCustomer Data InvolvedIdentity (basic)Government IDHighResolved

W. L. French Excavating Corporation

bd_e3ad81516bc81fa2 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 11, 2021

Filed

Nov 22, 2021

To disclose

11 days

Affected · nationwide

1,0148 in this filing

Linked

3 filings

Confidence

50%
Full breach record for W. L. French Excavating Corporation →

W. L. French Excavating Corporation reported a data breach affecting 1,014 individuals, including 8 Maine residents. The breach occurred between October 20, 2021, and October 27, 2021, and was discovered on November 11, 2021. The incident was an external system breach (hacking), where an unauthorized party acquired names in combination with Driver's License or Non-Driver Identification Card Numbers. Affected individuals were notified on November 22, 2021, and offered 24 months of credit monitoring and identity theft restoration services through Experian.

Maine clockDiscovered Nov 11, 2021 → Filed with AG Nov 22, 202111d ✓ ME AG ≤30d11 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 22 days
discovery → filing · 11 days

Oct 20, 2021

Begins

Nov 11, 2021

Discovered

Nov 22, 2021

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Maine State AGNov 22 · first · this page
Massachusetts State AG+1d
New Hampshire State AG+7d

Pattern: first filing Nov 22 (ME), last Nov 29 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.