HackingData ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
DILIGENT CORPORATION
bd_19c6f4b4f66d6c5b · schema v1 · pii pii-v1
Full breach record for DILIGENT CORPORATION →Diligent Corporation experienced unauthorized access to a network supporting its subsidiary, Steele Compliance, between May 21 and May 24, 2022. The security team detected the incident on May 23, 2022, and contained it by May 24, 2022. The breach involved human resources records, including names, email addresses, mailing addresses, and Social Security numbers. Diligent engaged outside experts, enhanced security controls, and offered 24 months of credit monitoring to affected individuals.
California clockDiscovered May 23, 2022 → Notified Jun 22, 202230d ✓ CA 60-day OK36 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_509ef5e5c81e5d82Montana State AGfiled 2023-02-02(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-562604
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 1, 2023
- Raw hash
- 0ba1a58d7897bd6e7183195bc038cc5ed666e03c794e6cb2bcab7c8460484ea8
Reporting entity
- Name
- DILIGENT CORPORATIONnorm: diligent
Victim entity
- Name
- DILIGENT CORPORATIONnorm: diligent
Incident
- Discovered
- May 23, 2022
- Materiality determined
- —
- Notification sent
- Jun 22, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 36 weeks(254 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 23, 2022→ Notified: Jun 22, 202230d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.