Bristol Bay Construction Holdings, LLC

On April 9, 2024, the Vermont Office of the Attorney General reported a data breach involving Bristol Bay Construction Holdings (BBCH). The incident involved unauthorized access to an employee census report containing names and Social Security numbers, which occurred between November 6, 2023, and November 7, 2023, affecting at least 5 individuals in Rhode Island. A scam website imitating Ceridian was the method of breach.

Source: https://ago.vermont.gov/document/2024-04-09-bristol-bay-construction-holdings-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/bbch-llc

"id": "bbc238072925",
"linkid": "bbch-llc",
"type": "Breach",
"date": "11/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 5,
                        'industry': 'Construction',
                        'location': 'Rhode Island',
                        'name': 'Bristol Bay Construction Holdings',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 5,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2024-04-09',
 'date_publicly_disclosed': '2024-04-09',
 'description': 'Unauthorized access to an employee census report containing '
                'names and Social Security numbers.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers']},
 'initial_access_broker': {'entry_point': 'Scam website imitating Ceridian'},
 'references': [{'date_accessed': '2024-04-09',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Bristol Bay Construction Holdings',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Scam website imitating Ceridian'}