AccidentalProfessional ServicesProfessional ServicesMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Randstad

bd_069888eb29c940c1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 9, 2011

Filed

Mar 9, 2011

To disclose

28 days

Affected

4state residents only

Linked

2 filings

Confidence

66%

Full breach record for Randstad →3 incidents on file

Randstad Professionals US, LP inadvertently disclosed personal information (names and SSNs) of four New Hampshire residents via an email attachment sent to an outside contractor on February 9, 2011. The recipient notified Randstad within 40 minutes and certified deletion of the data. Randstad instituted new email attachment policies and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Feb 9, 2011

Begins

Feb 9, 2011

Discovered

Mar 9, 2011

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_02c283b7931c45802011-03-11 · +2dVerified

Name: Randstad
norm: randstad
Domain: randstad.com

Name: Randstad
norm: randstad
Domain: randstad.com
Industry: Professional Servicesllm

Discovered: Feb 9, 2011
Breach occurred: Feb 9, 2011
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 14, 2011
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified Attorney General Michael A. Delaney of New Hampshire
Third party: via Outside contractorcontractor

During the incident: Recipient notified of error less than forty minutes after email was sent
Recipient certified that personal information was deleted and not copied, printed, forwarded or used
Arranged for recipient to certify under pains and penalties of perjury
Communicated with recipient to confirm none of the personal information had been retained
Changes made: Instituted new policies relating to the use of email attachments
Providing additional training on data security and privacy practices for all employees who have access to personal information
Offering free credit monitoring and identity fraud protection for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 9 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/randstad-professionals-20110309.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2011
Raw hash: 739a4a4ea6ca6868d943d244385cfb193bd9d694a73e2e671255d6c81eb4fd0f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRandstad

Victim entityRandstad

Incidentdiscovered Feb 9, 2011

Stated responseRecipient notified of error less than forty minutes after email was sent

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov