HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTHighContained
Lachman Consultant Services, Inc.
bd_09b4f260385dc391 · schema v1 · pii pii-v1
Full breach record for Lachman Consultant Services, Inc. →Lachman Consultant Services, Inc. notified South Carolina AG in September 2021 regarding unauthorized network activity on August 10, 2021. The incident affected approximately 1,810 current, former, and prospective employees and contractors worldwide. Compromised data included names, Social Security numbers, contact info, and payroll/HR data. The company engaged external experts, accelerated cloud migration, enabled enterprise security controls, and provided 24 months of identity theft protection. The incident was considered fully contained.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_822d3b20b82e1af2Montana State AGfiled 2021-09-21(1d gap)Candidate
- bd_f3f02e31056eba53Maine State AGfiled 2021-09-24(2d gap)Verified
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/LachmanConsultants.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2021
- Raw hash
- 43033b8a55ce74cf2b827af717cb7bb17774902312e99f94de8be599861c4eda
Reporting entity
- Name
- Lachman Consultant Services, Inc.norm: lachman consultant
Victim entity
- Name
- Lachman Consultant Services, Inc.norm: lachman consultant
Incident
- Discovered
- Aug 10, 2021
- Materiality determined
- —
- Notification sent
- Sep 21, 2021
- Affected individuals
- 1,810
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified appropriate authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.