HackingOtherCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Timberline Construction Corporation
bd_e95b5da298041966 · schema v1 · pii pii-v1
Full breach record for Timberline Construction Corporation →On August 21, 2025, an unauthorized actor gained access to Timberline Construction systems and accessed or acquired files containing name and Social Security numbers. The breach was discovered on October 15, 2025. Written notice was provided to 31 Maine residents on October 20, 2025 out of 386 total affected individuals. Timberline secured its environment, launched an investigation, and is offering 12 months of credit monitoring through Epiq.
Maine clockDiscovered Oct 15, 2025 → Filed with AG Oct 21, 20256d ✓ ME AG ≤30d6 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_59446d7c22d9720fNew Hampshire State AGfiled 2025-10-21Verified
- bd_e7c9c4277b952d6dVermont State AGfiled 2025-10-21Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ae1bc7e7-c728-4361-8978-286169cd2efc.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2025
- Raw hash
- 6bb0b29c3a95c5b22c0373f6b984ed27565c9dc55b1799c6f4bd350d8095830b
Reporting entity
- Name
- Timberline Construction Corporationnorm: timberline construction
- Domain
- timberlineconstruction.com
- Industry
- Construction
Victim entity
- Name
- Timberline Construction Corporationnorm: timberline construction
- Domain
- timberlineconstruction.com
- Industry
- Construction
- Industry
- Otherllm
Incident
- Discovered
- Oct 15, 2025
- Materiality determined
- —
- Notification sent
- Oct 20, 2025
- Affected individuals
- 31
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified relevant state regulators as necessary
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 6d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 15, 2025→ Filed with AG: Oct 21, 20256d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.