Bristol Bay Construction Holdings (BBCH) suffered a data breach initiated through a phishing scam, resulting in the unauthorized download of an employee census report. The compromised data included names and Social Security numbers of 27 Maine residents, all of whom were employees or former employees of the company. The breach was detected on January 9, 2024, but affected individuals were not notified until April 9, 2024, raising concerns about delayed response. The incident highlights vulnerabilities in BBCH’s cybersecurity defenses, particularly against social engineering tactics like phishing, which directly targeted sensitive employee information. The exposure of Social Security numbers poses significant risks, including identity theft and financial fraud for the impacted individuals. While the breach was contained to employee data, the nature of the stolen information elevates the severity due to its potential for long-term misuse.