HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)LowContained

Everest Global Services, Inc

bd_1e1cd906474ea4ca · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 15, 2022

Filed

Jul 27, 2023

To disclose

49 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

65%

Full breach record for Everest Global Services, Inc →

Everest Global Services, Inc., a reinsurance and insurance provider, experienced unauthorized access to five email accounts between August 8 and August 16, 2022. The company identified suspicious activity on August 15, 2022. Affected data included names and other personal information. The company engaged forensic experts, secured the email environment, reset passwords, reinforced MFA, and offered identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 15, 2022 → Notified Jul 27, 2023346d ✗ CA 60-day late49 weeks discovery → filing

Incident timeline

undetected · 7 days

discovery → filing · 49 weeks / 346 days

Aug 8, 2022

Begins

Aug 15, 2022

Discovered

Jul 27, 2023

Filed

vs. sector median

+41 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_cff0a20abebecd512023-07-28 · +1dVerified
California State AGbd_3a994f2662ff9efe2023-02-17 · +160dVerified
Massachusetts State AGbd_afbb6c19fe8ee8b92022-12-23 · +216dVerified
New Hampshire State AGbd_c66e06e07833730f2022-12-19 · +220dVerified

Show 3 more filings ↓up to 223d gap

Indiana State AGbd_9a110b87bf0e0bda2022-12-16 · +223dVerified
Montana State AGbd_b4d427d811c2e3ec2022-12-16 · +223dCandidate
Oregon State AGbd_cb49d4b24eef8f8e2022-12-16 · +223dVerified

Name: Everest Global Services, Inc
norm: everest global

Name: Everest Global Services, Inc
norm: everest global
Industry: Financial Servicesllm

Discovered: Aug 15, 2022
Breach occurred: Aug 8, 2022 – Aug 16, 2022
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 27, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Implemented incident response protocols
Secured the email environment
Engaged independent computer forensic experts to assist with an investigation
Resetting passwords for email accounts
Reinforcing multi-factor authentication measures
Increasing the frequency of mandatory company-wide training and awareness of increasing cyber risks
Offering identity theft protection services through IDX
Changes made: Reinforcing multi-factor authentication measures
Increasing the frequency of mandatory company-wide training and awareness of increasing cyber risks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(346 days from discovery to filing)
Compliance flags: CA 60-day late · 346d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 15, 2022
→ Notified: Jul 27, 2023
346d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 15, 2022 → Notified: Jul 27, 2023	346d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Indiana State AGDec 16 · first

Montana State AGDec 16 · first

Oregon State AGDec 16 · first

New Hampshire State AG+3d

Massachusetts State AG+7d

California State AG+63d

California State AG+223d · this page

New Hampshire State AG+224d

Pattern: first filing Dec 16 (IN), last Jul 28 (NH) — a 224-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-570932
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2023
Raw hash: 49240f5a7c62b6ce5f4cc2646b32bf60860504165862d5dc05dc0c6a31568656

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityEverest Global Services, Inc

Victim entityEverest Global Services, Inc

Incidentdiscovered Aug 15, 2022

Stated responseImplemented incident response protocols

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov