AccidentalProfessional ServicesProfessional ServicesMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Oxford Global Resources, LLC

bd_14e552cf843b862c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 15, 2024

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

84%

Full breach record for Oxford Global Resources, LLC →

On or about February 12, 2024, an Oxford Global Resources employee inadvertently sent a file containing W2s for Oxford employees to a former consultant in response to a request for that consultant's W2. The exposed data included employee names, Social Security Numbers, and addresses. Oxford isolated and deleted the file and confirmed it could not be forwarded to unauthorized recipients. Notification letters were sent to affected employees on May 13, 2024, and 12 months of complimentary credit monitoring via TransUnion/Cyberscout was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 12, 2024

Begins

May 15, 2024

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_4f8aa4b7e23ccf622024-05-15Verified
Montana State AGbd_6061c33e6537d9052024-05-16 · +1dCandidate
New Hampshire State AGbd_7300d761bc0faf4d2024-05-16 · +1dVerified
Massachusetts State AGbd_7488fa3b3491832b2024-05-17 · +2dVerified

Show 1 more filing ↓up to 2d gap

Indiana State AGbd_44612519f2e9b80e2024-05-13 · +2dVerified

Name: Oxford Global Resources, LLC
norm: oxford global resources

Name: Oxford Global Resources, LLC
norm: oxford global resources
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Feb 12, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Insider
Threat actor: Internal

During the incident: Immediately hired a nationally recognized law firm to help with its investigation and remediation of this incident
Isolated and deleted the file from the recipient's system, along with the email through which it was issued
Confirmed that the file could not have been forwarded and opened by unauthorized recipients
Performed searches of the dark web and has not found any indication that any of the impacted personal information has made its way to the dark web
Offering 12-months of complimentary credit monitoring service provided by TransUnion
Changes made: Taking concerted steps to ensure that there is no further dissemination of this information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGMay 13 · first

Maine State AG+2d

California State AG+2d · this page

Montana State AG+3d

New Hampshire State AG+3d

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-585424
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 15, 2024
Raw hash: 486c5d45d77a3d0ed2a4eaf8588fef6d135f23a2ea3ca6e1ad05a4e237966703

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityOxford Global Resources, LLC

Victim entityOxford Global Resources, LLC

IncidentInsider

Stated responseImmediately hired a nationally recognized law firm to help with its investigation and remediation of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov