HackingTechnologyInformationCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Paycom Payroll, LLC

bd_194602a41e5cc520 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 13, 2023

Filed

Jul 31, 2023

To disclose

18 days

Affected · nationwide

7,4492 in this filing

Linked

6 records

Confidence

66%

Full breach record for Paycom Payroll, LLC →

Paycom Payroll, LLC reported an external system breach (hacking) occurring between May 28, 2023, and June 2, 2023, discovered on July 13, 2023. The incident affected 7,449 individuals, including 2 Maine residents. Acquired data included names combined with driver's license numbers. Paycom provided 24 months of identity monitoring via Experian and enrolled employees in additional protection benefits.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 13, 2023 → Filed with AG Jul 31, 202318d ✓ ME AG ≤30d18 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 46 days

discovery → filing · 18 days

May 28, 2023

Begins

Jul 13, 2023

Discovered

Jul 31, 2023

Filed

vs. sector median

8 wks faster

This filing is one of 6 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_f8013dcb4ad0be622023-07-13 · +18dVerified by operator

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_a5c9dcb1d69043722023-07-31Verified by operator
Indiana State AGbd_d91010528f0e792b2023-07-31Verified
Montana State AGbd_e753259d2ecd1b692023-07-31Verified by operator
Massachusetts State AGbd_95171b42f6723fad2024-07-10 · +345dVerified by operator

Name: Paycom Payroll, LLC
norm: paycom payroll
Domain: paycom.com

Name: Paycom Payroll, LLC
norm: paycom payroll
Domain: paycom.com
Industry: Technologyllm

Discovered: Jul 13, 2023
Breach occurred: May 28, 2023 – Jun 2, 2023
Undetected for: 46 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 31, 2023
Affected individuals: 7,449state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Driver's licence number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Provided affected individuals with identity monitoring services for 24 months via Experian's Identity Works
Automatically enrolled impacted current employees and their dependents in a company benefit that further protects their identify at no cost to the employees
Changes made: Provided identity monitoring services for 24 months via Experian's Identity Works
Enrolled impacted current employees and their dependents in a company benefit that further protects their identify at no cost to the employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: ME AG ≤30d · 18d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 13, 2023
→ Filed with AG: Jul 31, 2023
18d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 13, 2023 → Filed with AG: Jul 31, 2023	18d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 31 · first

Indiana State AGJul 31 · first

Montana State AGJul 31 · first

Maine State AGJul 31 · first · this page

Massachusetts State AG+345d

Pattern: first filing Jul 31 (MA), last Jul 10 (MA) — a 345-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0a6431a1-1278-41df-85d6-73ed0fc0dd8c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2023
Raw hash: 405d0aef8efaba1078fcabf335fadc49f629e0a16c87b7c6e1fc679153918f17

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityPaycom Payroll, LLC

Victim entityPaycom Payroll, LLC

Incidentdiscovered Jul 13, 2023

Stated responseProvided affected individuals with identity monitoring services for 24 months via Experian's Identity Works

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov