HackingManufacturingManufacturingData ExfiltratedPIIIdentity (basic)MediumContained

Hawaiian Dredging Construction Company

bd_eff7a5fc0740c418 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 3, 2021

To disclose

—

Affected

3,756state residents only

Linked

4 filings

Confidence

64%

Full breach record for Hawaiian Dredging Construction Company →

Hawaiian Dredging Construction Company, Inc. notified individuals of unauthorized access to its systems between April 10-17, 2021. An unauthorized person accessed systems and transferred files. The company engaged law enforcement and a cybersecurity firm. Affected data included personal information. The company offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Apr 10, 2021

Begins

Sep 3, 2021

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_5e7f1ab670ab95b12021-09-03Verified
Maine State AGbd_d7290a55a9a168452021-09-03Candidate
New Hampshire State AGbd_09ab6dc1d5d700092021-09-07 · +4dVerified

Name: Hawaiian Dredging Construction Company
norm: hawaiian dredging construction

Name: Hawaiian Dredging Construction Company
norm: hawaiian dredging construction
Industry: Manufacturingllm

Discovered: —
Breach occurred: Apr 10, 2021 – Apr 17, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 3,756state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: External

During the incident: Took steps to secure our network
Contacted law enforcement
Began an investigation with the assistance of a cybersecurity firm
Offering you a complimentary one-year membership with Experian’s® IdentityWorksTM
Changes made: Implemented additional security measures to further enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HI CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGSep 3 · first

Maine State AGSep 3 · first

Hawaii State AGSep 3 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2021/10/OCP-2021-0725.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 3, 2021
Raw hash: 5c1fa7003bf8e67d0466656300b438994cd4bcb7c5be48ae88661571b828e7f9

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHawaiian Dredging Construction Company

Victim entityHawaiian Dredging Construction Company

IncidentUnauthorized Access

Stated responseTook steps to secure our network

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org