HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)CredentialsMediumContained

Wurkforce, Inc.

bd_18f0dff354c8b384 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2020

Filed

Aug 3, 2020

To disclose

25 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

64%

Full breach record for Wurkforce, Inc. →

Wurkforce, Inc. experienced unauthorized access to employee email accounts between November 22, 2019, and February 12, 2020. The incident was discovered on February 11, 2020. Affected data may include names, addresses, SSNs, driver's license numbers, financial account details, and health information. Wurkforce engaged forensic investigators, secured email accounts, notified law enforcement, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 11, 2020 → Notified Aug 3, 2020174d ✗ CA 60-day late25 weeks discovery → filing

Incident timeline

undetected · 81 days

discovery → filing · 25 weeks / 174 days

Nov 22, 2019

Begins

Feb 11, 2020

Discovered

Aug 3, 2020

Filed

vs. sector median

+6 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Oregon State AGbd_3a96e56e76927b842020-08-03Candidate
Washington State AGbd_5304feaf854097762020-08-03Verified
Indiana State AGbd_7e0d5e2688fff7222020-08-03Verified
Montana State AGbd_921460ad57981f4c2020-08-03Verified by operator

Show 2 more filings ↓

Massachusetts State AGbd_98a758c17a0664372020-08-03Verified
New Hampshire State AGbd_9ebd1e3626d41f482020-08-03Verified

Name: Wurkforce, Inc.
norm: wurkforce

Name: Wurkforce, Inc.
norm: wurkforce
Industry: Professional Servicesllm

Discovered: Feb 11, 2020
Breach occurred: Nov 22, 2019 – Feb 12, 2020
Undetected for: 81 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Took steps to secure all Würk email accounts
Launched an investigation
Engaged an independent digital forensics firm
Notified law enforcement of this incident
Offering complimentary MyIDCareTM services through ID Experts
Changes made: Took steps to enhance the security of its email system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(174 days from discovery to filing)
Compliance flags: CA 60-day late · 174d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 11, 2020
→ Notified: Aug 3, 2020
174d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 11, 2020 → Notified: Aug 3, 2020	174d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Oregon State AGAug 3 · first

Washington State AGAug 3 · first

Indiana State AGAug 3 · first

Montana State AGAug 3 · first

Massachusetts State AGAug 3 · first

New Hampshire State AGAug 3 · first

California State AGAug 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-192693
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2020
Raw hash: 8291bab4169074c66244e62ac4a37d3235b9aedfa2ad5dc29efc4625e34ef3ec

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWurkforce, Inc.

Victim entityWurkforce, Inc.

Incidentdiscovered Feb 11, 2020

Stated responseTook steps to secure all Würk email accounts

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov