HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Employee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Performant Financial Corporation
bd_1003aa167275d82e · schema v1 · pii pii-v1
Full breach record for Performant Financial Corporation →Performant Financial Corporation notified affected individuals of a breach at its external auditor, Campbell Taylor & Company (C&T). An unauthorized individual accessed a C&T network drive between January 27 and February 2, 2017, which contained Performant's 401K audit files. Potentially exposed data includes employee names, dates of birth, and Social Security numbers. C&T notified law enforcement and regulators; Performant offered 12 months of free identity protection through AllClearID.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3875692ae9736a19Oregon State AGfiled 2017-08-14Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-101052
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 14, 2017
- Raw hash
- 3316ee0c1a2d044335f9573ac631c477028f7cb8ffd350b9dd0b70c73b9259d2
Reporting entity
- Name
- Performant Financial Corporationnorm: performant financial
Victim entity
- Name
- Performant Financial Corporationnorm: performant financial
- Industry
- Financial Servicesllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1530 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- C&T notified the Federal Bureau of InvestigationC&T notified the Internal Revenue ServiceC&T notified the California Franchise Tax BoardC&T notified all three nationwide credit bureausC&T notified relevant state agencies
- Third party
- via Campbell Taylor & Company
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.