UnknownOtherAuthenticationFinancial accountHealth (basic)Government IDMedium

Nash Brothers Construction

bd_eb35b54502ca8fd7 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Dec 9, 2024

Filed

Jun 1, 2025

To disclose

—

Affected

Withheld by the regulator

Linked

4 filings

Confidence

95%

Full breach record for Nash Brothers Construction →

NASH BROTHERS CONSTRUCTION COMPANY filed a data-breach notice with the Illinois Attorney General in June 2025 (case 25-06-226). The register records the breach as discovered on December 9, 2024. Personal information types reported: drivers license, financial account number, medical information, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Dec 9, 2024

Discovered

Jun 1, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 138 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_6217337637814b822025-01-13 · +138dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_5849bd6602e35e5b2025-06-10 · +9dCandidate
Massachusetts State AGbd_b65a7185ded3c0302025-06-12 · +11dVerified

Name: Nash Brothers Construction
norm: nash brothers construction

Name: Nash Brothers Construction
norm: nash brothers construction
Industry: Otherllm

Discovered: Dec 9, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Withheld by the regulator
Data types: AuthenticationFinancial accountHealth (basic)Government ID
Data elements: Driver's licence numberFinancial account numberMedical informationSocial Security numberUsername + password
Attack vector: Unknown

Compliance flags: Leak >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Illinois State AGJun 1 · first · this page

Indiana State AG+9d

Massachusetts State AG+11d

Pattern: first filing Jun 1 (IL), last Jun 12 (MA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://databreachnoticetoattorneygeneral.illinoisattorneygeneral.gov/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2025
Raw hash: af6bce91393d72137cfaf09ce279423e35d26db7c44b157c073f7d1cd72ca32b

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityNash Brothers Construction

Victim entityNash Brothers Construction

Incidentdiscovered Dec 9, 2024

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedatabreachnoticetoattorneygeneral.illinoisattorneygeneral.gov