UnknownMedium

Barnhart Crane & Rigging Company, Inc.

bd_fd55f3fbf55b820d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 21, 2026

Filed

May 21, 2026

To disclose

4 weeks

Affected

22,822

Linked

10 filings

Confidence

95%

Full breach record for Barnhart Crane & Rigging Company, Inc. →

Barnhart Crane & Rigging Company, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-05-21. The breach occurred during 4/23/2025 - 4/24/2025. The breach was discovered on 4/21/2026. 22,822 individuals were affected. Notice was sent on 5/21/2026.

J jump to incidentP pin to compareR raw source

Oregon clock✓ OR AG ≤45d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 363 days

discovery → filing · 4 weeks / 30 days

Apr 23, 2025

Begins

Apr 21, 2026

Discovered

May 21, 2026

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_32693b37d24227332026-05-21Verified by operator
Washington State AGbd_420c4e0b8e6502e02026-05-21Verified
Maine State AGbd_5f5ca5cd8893c2412026-05-21Verified
Massachusetts State AGbd_8f1c23eb726072f02026-05-21Verified

Show 5 more filings ↓up to 20d gap

Nebraska State AGbd_a0295f7126357e822026-05-21Verified
Vermont State AGbd_ea66e1ba19df58822026-05-21Verified
Texas State AGbd_2e9649bf53ed38d12026-05-22 · +1dVerified
New Hampshire State AGbd_7a6ff5b1f6fae8752026-05-26 · +5dVerified
Illinois State AGbd_ad2eb3f392108dd92026-05-01 · +20dVerified

Name: Barnhart Crane & Rigging Company, Inc.
norm: barnhart crane rigging

Name: Barnhart Crane & Rigging Company, Inc.
norm: barnhart crane rigging

Discovered: Apr 21, 2026
Breach occurred: Apr 23, 2025 – Apr 24, 2025
Undetected for: 363 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 21, 2026
Affected individuals: 22,822nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: OR AG ≤45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGMay 1 · first

Indiana State AG+20d

Washington State AG+20d

Maine State AG+20d

Massachusetts State AG+20d

Nebraska State AG+20d

Vermont State AG+20d

Oregon State AG+20d · this page

Texas State AG+21d

New Hampshire State AG+25d

Pattern: first filing May 1 (IL), last May 26 (NH) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 21, 2026
Raw hash: 85d41be4fce933ca341ccd8d5b3534da6423dcaa3151b9850669e90642b63aa2

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityBarnhart Crane & Rigging Company, Inc.

Victim entityBarnhart Crane & Rigging Company, Inc.

Incidentdiscovered Apr 21, 2026

ComplianceOR AG ≤45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov