MalwareConstructionConstructionRansomwareData ExfiltratedData EncryptedGovernment IDFinancial accountIdentity (basic)HighContained

Absher Construction Company

bd_ebe8823d38e02d7a · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 31, 2020

Filed

Jan 27, 2021

To disclose

21 weeks

Affected

1,527state residents only

Linked

3 filings

Confidence

71%

Full breach record for Absher Construction Company →

Absher Construction Company notified Washington AG of a cyberattack where malware encrypted systems and collected files between Aug 28-29, 2020. Discovered Aug 31, 2020. 1,527 WA residents affected. Data included SSN, driver's license, financial account numbers, and DOB. Remediation included forensic investigation, password resets, and 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d21 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days

discovery → filing · 21 weeks / 149 days

Aug 28, 2020

Begins

Aug 31, 2020

Discovered

Jan 27, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_686da396122a6d272021-01-27Verified
Montana State AGbd_d470a74179d604e22021-01-27Candidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Absher Construction Company
norm: absher construction
Industry: Constructionllm

Discovered: Aug 31, 2020
Breach occurred: Aug 28, 2020 – Aug 29, 2020
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 27, 2021
Affected individuals: 1,527state-resident count only
Data types: Government IDFinancial accountIdentity (basic)
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported this matter to law enforcementwill also be reporting this incident to state regulators as required

During the incident: Commenced an investigation, working with third-party forensic investigators
Reset passwords
Initiate an investigation
Notify law enforcement
Notify potentially impacted individuals
Offering complimentary access to twelve (12) months of credit and identity monitoring services, including identity restoration services through Experian
Changes made: Reviewing and enhancing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJan 27 · first

Montana State AGJan 27 · first

Washington State AGJan 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10398.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2021
Raw hash: 95cae7b187c6acacd6aca85dc1d1e332c5da4d71329c699860da720fcc178fd1

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityAbsher Construction Company

Incidentdiscovered Aug 31, 2020

Stated responseCommenced an investigation, working with third-party forensic investigators

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com