MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MinorMediumContained

Traffic Solutions Corporation

bd_0e1dcb8736a379a4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 14, 2021

Filed

Nov 16, 2021

To disclose

31 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Traffic Solutions Corporation →2 incidents on file

Traffic Solutions Corporation (dba Statewide Safety Systems) disclosed a ransomware attack discovered on April 14, 2021. Cyber criminals acquired files containing personal information of current and former employees, business contacts, and dependents, including names, contact info, dates of birth, government IDs (SSN, tax ID, driver's license, passport), financial account numbers, and medical information. The company engaged forensic experts, contained the incident, notified law enforcement, and provided 12 months of Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 31 weeks / 216 days

Apr 14, 2021

Discovered

Nov 16, 2021

Filed

vs. sector median

+11 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_6100503d2a5493512021-11-17 · +1dVerified
Indiana State AGbd_0173986fe4a08b642021-11-18 · +2dVerified

Name: Traffic Solutions Corporation
norm: traffic solutions

Name: Traffic Solutions Corporation
norm: traffic solutions
Also named: Traffic Solutions Corporationdba oflegal entity
Statewide Safety Systemsdba oftrade name
Industry: Professional Servicesllm

Discovered: Apr 14, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Minor
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement of the incident

During the incident: Engaged leading outside security experts to assist with our investigation
Implemented additional information security measures to enhance our safeguards
Notified law enforcement of the incident
Took immediate efforts to contain and mitigate the cyberattack
Launched an extensive investigation to determine what personal information was impacted
Changes made: Providing each potentially impacted employee with a complimentary 12-month membership of Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(216 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGNov 16 · first · this page

Massachusetts State AG+1d

Indiana State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-547609
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2021
Raw hash: c39135c2213cb14032a2c611db084c13e51d486f952794e8d0818ea2644369b4

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTraffic Solutions Corporation

Victim entityTraffic Solutions Corporation

Incidentdiscovered Apr 14, 2021

Stated responseEngaged leading outside security experts to assist with our investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov