ComplyRight
bd_1c54d5a1341ed63f · schema v1 · pii pii-v1
Full breach record for ComplyRight →ComplyRight, Inc. experienced unauthorized access to its website between April 20, 2018, and May 22, 2018. The company discovered the issue on May 22, 2018, and immediately disabled the platform. Forensic investigation confirmed that personal information, including names, addresses, phone numbers, email addresses, and Social Security numbers, was accessed or viewed. It could not be confirmed if data was downloaded. The company is offering 12 months of credit monitoring and identity theft protection through TransUnion to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 20, 2018
Begins
May 22, 2018
Discovered
Jul 19, 2018
Filed
vs. sector median
9 wks faster
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Massachusetts State AGbd_7f79661b9712d7072018-07-24 · +5dVerified
- South Carolina State AGbd_a24e0da7536f0da92018-07-24 · +5dVerified
- Hawaii State AGbd_24a74f3f3d61b6852018-07-25 · +6dVerified
- Oregon State AGbd_3a041c49d3f4d0c22018-07-25 · +6dVerified
Show 3 more filings ↓Show fewer ↑up to 7d gap
- New Hampshire State AGbd_3cc02a1b1fb285562018-07-13 · +6dVerified
- Washington State AGbd_ceca03da7c7029f32018-07-13 · +6dVerified
- Montana State AGbd_f9b984c81b6a84802018-07-12 · +7dCandidate
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jul 12 (MT), last Jul 25 (OR) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.