Business ProfileforS E M A Construction
Additional business information
The following describes a government action that has been resolved by either a settlement or a decision by a court or administrative agency. If the matter is being appealed, it will be noted below.
On November 8, 2021, The State of Colorado through its Department of Law entered into an Assurance of Discontinuance with SEMA Construction, Inc.
The Assurance states SEMA Construction will update its data security practices and pay more than $63,000 after it failed to protect the personal information of nearly 2,000 Colorado employees and residents.
Colorado law requires companies that maintain sensitive personal information to take reasonable steps to protect information, to dispose of it when it is no longer needed, and to notify Colorado residents promptly when their information is at risk of being misused by unauthorized third parties.
SEMA violated Colorado data security laws when it failed to maintain reasonable security practices and notify Colorado residents of a 2018 data breach in a timely manner.
When SEMA was the target of a phishing attack in October 2018, the company did not have a data disposal policy. SEMA employees had stored personal information, such as Social Security numbers, bank account or routing numbers, and driver’s license numbers, in their employee email accounts for as long as 20 years. The company failed to account for this risky practice and did not take a comprehensive approach to information security, as it should have, given its size and the nature of the information it maintained.
When SEMA discovered the phishing attack impacted employees’ email accounts nearly a year later, the company was unprepared to notify impacted Coloradans of the breach. Although the company learned of the breach in 2019, SEMA didn’t notify some employees of the breach until Oct. 1, 2020. Other employees weren’t notified until December 30, 2020, over two years after the company discovered the phishing attack.
In the settlement, the company agreed to update its security practices by maintaining an incident response plan, an information security plan, and an information disposal policy. SEMA will also submit reports to the Department of Law to ensure it complies with Colorado law to protect personal information of its clients and employees in the future.
For more information, please contact the State of Colorado Department of Law athttps://coag.gov/ or (720) 508-6000.
At-a-glance
Related Categories
Overview
Business Details
This is a multi-location business.
- Location of This Business
- 7353 S Eagle St, Centennial, CO 80112-4223
- BBB File Opened:
- 11/6/2002
- Years in Business:
- 33
- Business Started:
- 2/20/1991
- Business Started Locally:
- 2/20/1991
- Type of Entity:
- Corporation
- Alternate Business Name
- Sema Construction, Inc.
- Business Management
- Mr. Thomas Ames, CEO
- Mr. Brett Ames, Corporate Vice President, District President
- Mr. Steven Hathaway, CFO
- Contact Information
Principal
- Mr. Thomas Ames, CEO
- Mr. Steven Hathaway, CFO
Customer Contact
- Mr. Thomas Ames, CEO
- Additional Contact Information
Fax Numbers
- (303) 627-2626Primary Fax
- (303) 627-2626
Customer Complaints
0 Customer Complaints
Need to file a complaint? BBB is here to help. We'll guide you through the process. How BBB Processes Complaints and Reviews
File a ComplaintBBB Business Profiles may not be reproduced for sales or promotional purposes.
BBB Business Profiles are provided solely to assist you in exercising your own best judgment. BBB asks third parties who publish complaints, reviews and/or responses on this website to affirm that the information provided is accurate. However, BBB does not verify the accuracy of information provided by third parties, and does not guarantee the accuracy of any information in Business Profiles.
When considering complaint information, please take into account the company's size and volume of transactions, and understand that the nature of complaints and a firm's responses to them are often more important than the number of complaints.
BBB Business Profiles generally cover a three-year reporting period. BBB Business Profiles are subject to change at any time. If you choose to do business with this business, please let the business know that you contacted BBB for a BBB Business Profile.
As a matter of policy, BBB does not endorse any product, service or business. Businesses are under no obligation to seek BBB accreditation, and some businesses are not accredited because they have not sought BBB accreditation.