CORNERSTONE BUILDING BRANDS, INC.

Cornerstone Building Brands experienced an external system breach (hacking) on December 24, 2020, which was discovered on May 21, 2021. The breach affected one Maine resident, whose name and Social Security Number were compromised. The company offered one year of credit monitoring and identity theft protection services through Kroll.

Cornerstone Building Brands notified individuals of a security incident in late December 2020 where an unauthorized party accessed employee information. The company engaged forensic investigators and law enforcement. Affected data likely included PII and financial data. One-year identity monitoring via Kroll was offered.

Cornerstone Building Brands reported a data breach to the Indiana Attorney General. The breach occurred on 2020-11-30 and was reported on 2021-05-21. 3 Indiana residents were affected. 409 individuals affected in total.

Cornerstone Building Brands filed a supplemental notice with the NH AG regarding a security incident where an unauthorized person accessed two employee email accounts between April 1-2, 2019. The incident exposed names, financial account numbers, and payment card numbers of 9 NH residents. The company engaged a cybersecurity firm, secured accounts, and provided one year of identity monitoring via Kroll.

Cornerstone Building Brands, Inc. reported that an unauthorized person accessed two employees' email accounts between April 1 and April 2, 2019. The investigation determined that personal information, including names and addresses, may have been accessed or viewed. The company secured the accounts, engaged a cybersecurity firm, and offered one year of identity monitoring services to affected individuals.

Cornerstone Building Brands, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-09-11. 12 Massachusetts residents were affected. The report records the breach type as electronic.

Cornerstone Building Brands, Inc. notified Montana residents that an unauthorized person accessed two employees' email accounts between April 1-2, 2019. The incident may have exposed personal information. The company engaged a cybersecurity firm, secured accounts, and offered one year of free identity monitoring via Kroll.

Cornerstone Building Brands, Inc. notified the NH AG that an unauthorized person accessed two employee email accounts between April 1-2, 2019. On August 16, 2019, the company determined 8 NH residents' PII (names, SSNs, financial/payment card info) was accessed. Notifications were sent September 11, 2019, offering 1 year of credit monitoring.