HackingProfessional ServicesProfessional ServicesStolen CredentialsDelayed DiscoveryIdentity (basic)MediumContained

SmartStart Employment Screening, Inc.

bd_0db3e2cd96640c93 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 18, 2020

Filed

Aug 25, 2021

To disclose

36 weeks

Affected

4,465state residents only

Linked

9 filings

Confidence

65%

Full breach record for SmartStart Employment Screening, Inc. →

SmartStart Employment Screening, Inc. notified applicants that suspicious activity on its server on Dec 18, 2020 may have exposed names. The company engaged cyber experts and offered IDX identity monitoring services.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due36 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 36 weeks / 250 days

Dec 18, 2020

Discovered

Aug 25, 2021

Filed

vs. sector median

+18 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Washington State AGbd_27e97a822e6e13622021-08-24 · +1dVerified
Indiana State AGbd_97379d175ed5a5552021-08-24 · +1dVerified
Montana State AGbd_bb3c6553e769b6d42021-08-24 · +1dVerified
New Hampshire State AGbd_c24b30aeb03debab2021-08-24 · +1dVerified

Show 4 more filings ↓up to 236d gap

California State AGbd_050d1847cd215db92021-08-27 · +2dVerified
Massachusetts State AGbd_5d1119173a1a1d702021-08-27 · +2dVerified
Maine State AGbd_79b8e613fe4dbbff2021-08-27 · +2dVerified
Illinois State AGbd_767e5f0a78a5cc602021-01-01 · +236dCandidate

Name: SmartStart Employment Screening, Inc.
norm: smartstart employment screening

Name: SmartStart Employment Screening, Inc.
norm: smartstart employment screening
Industry: Professional Servicesllm

Discovered: Dec 18, 2020
Materiality determined: —
Notification sent: Aug 24, 2021
Affected individuals: 4,465state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation into the incident
Consulted with cyber experts to determine what information, if any, may have been accessed
Offering you information about steps you can take to help protect your personal information
Offering complimentary identity monitoring and recovery services for through a leading identity protection company called IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 36 weeks(250 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Washington State AG+235d

Indiana State AG+235d

Montana State AG+235d

New Hampshire State AG+235d

South Carolina State AG+236d · this page

California State AG+238d

Massachusetts State AG+238d

Maine State AG+238d

Pattern: first filing Jan 1 (IL), last Aug 27 (ME) — a 238-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/SmartStart.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 25, 2021
Raw hash: 3bcd7e2fcc290aa1ef40b4e19185ac5f5e02d23b0e90e094ccd3fcd4a31040f5

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entitySmartStart Employment Screening, Inc.

Victim entitySmartStart Employment Screening, Inc.

Incidentdiscovered Dec 18, 2020

Stated responseLaunched an investigation into the incident

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov