HackingTechnologyProfessional ServicesInformationVulnerability ExploitCapture Stored DataTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Ceridian Corporation

bd_07f4615c6450a83c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 23, 2009

Filed

Feb 1, 2010

To disclose

6 weeks

Affected

79state residents only

Linked

2 filings

Confidence

66%

Full breach record for Ceridian Corporation →2 incidents on file

Ceridian Corporation notified the NH AG of a breach affecting 79 NH residents. Unauthorized access occurred Dec 22-23, 2009, via an unknown hacker accessing the Powerpay web application. Data exposed included names, SSNs, birth dates, and bank account info. Notification began Jan 29, 2010, offering 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 weeks / 40 days

Dec 22, 2009

Begins

Dec 23, 2009

Discovered

Feb 1, 2010

Filed

vs. sector median

13 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_4a4c62d57d45fe142010-02-02 · +1dVerified

Name: Ceridian Corporation
norm: ceridian

Name: Ceridian Corporation
norm: ceridian
Industry: TechnologyllmProfessional Servicesllm

Discovered: Dec 23, 2009
Breach occurred: Dec 22, 2009 – Dec 23, 2009
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jan 29, 2010
Affected individuals: 79state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: exploit_public_facing

During the incident: Conducted an internal investigation to determine the source of the unusual activity
Alerted the Federal Bureau of Investigation
Notified the consumer reporting agencies of the event
Began notifying the New Hampshire residents whose personal information may have been accessed
Offering affected New Hampshire residents one year of free credit file monitoring
Changes made: Offering affected New Hampshire residents one year of free credit file monitoring and identity theft protection through Equifax Credit Watch Silver
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGFeb 1 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ceridian-20100201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 1, 2010
Raw hash: c1afe86ccddfe2211112458cac786e111959c9ce266f5a9f7b13a18f72b1b77c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCeridian Corporation

Victim entityCeridian Corporation

Incidentdiscovered Dec 23, 2009

Stated responseConducted an internal investigation to determine the source of the unusual activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov