Heavy Hammer, Inc.
ent_de95c15b9587d5c787f4116d
Disclosures
9
State AG · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
22,717
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Heavy Hammer, Inc.
- Normalized
- heavy hammer— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- Massachusetts State AGas reporting2025-01-07
Heavy Construction Systems reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-01-07. 7 Massachusetts residents were affected.
- Maine State AGas victim2023-06-09
Heavy Hammer, Inc. experienced an external system breach on April 21, 2023, which was discovered the following day. The breach affected 92 Maine residents, compromising their names and financial account or credit/debit card numbers, including any associated security codes or PINs. The company notified the affected individuals electronically on June 2, 2023, and offered 12 months of identity theft protection services through Experian.
- California State AGas victim2023-06-06
Heavy Hammer, Inc. experienced a ransomware attack on April 21, 2023, following a phishing campaign targeting employees. The incident compromised customer data including names, contact information, and payment card/bank account details. The company contained the attack, engaged forensic experts, and is offering 12 months of identity monitoring to affected individuals.
- Oregon State AGas victim2023-06-06
Heavy Hammer reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-06. The breach occurred during 4/21/2023. The breach was discovered on 5/9/2023. 22,000 individuals were affected. Notice was sent on 6/5/2023.
- Massachusetts State AGas victim2023-06-02
Heavy Hammer reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-02. 314 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2023-06-02
Heavy Hammer, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-04-21 and was reported on 2023-06-02. 373 Indiana residents were affected. 22,717 individuals affected in total.
- Montana State AGas victim2023-06-02
Heavy Hammer, Inc. notified customers that on or about April 21, 2023, its servers were compromised by a ransomware attack following a phishing incident. The breach may have exposed names, contact info, and payment data. The company engaged forensic experts, isolated the attack, and offered 12 months of Experian IdentityWorks.
- Vermont State AGas victim2023-06-02
Heavy Hammer, Inc. disclosed a ransomware attack affecting customers of its HUD-related websites (AllHud, HudExchange, etc.) on or about April 21, 2023. The breach was preceded by a phishing attack on employees. Exposed data included names, contact info, and payment details (credit card/bank accounts). The company retained cybersecurity experts, isolated the systems, and offered 12 months of Experian IdentityWorks. Notification was sent June 1, 2023.
- Washington State AGas victim2023-05-23
Heavy Hammer, Inc., a real estate business based in Maryland, reported a ransomware cyberattack to the Washington Attorney General. The incident occurred on April 21, 2023, and was discovered the following day. The breach affected 563 Washington residents.