South Carolina Department of Revenue
bd_2336edadee3e8252 · schema v1 · pii pii-v1
Full breach record for South Carolina Department of Revenue →The South Carolina Department of Revenue suffered a data breach in September 2012, discovered in October 2012. An attacker gained initial access via a phishing email sent to employees in August 2012, stealing credentials. The attacker used these credentials to access the network via Citrix, dumped passwords, and exfiltrated approximately 74.7 GB of data, including tax returns, SSNs, and financial information, between September 1 and September 15, 2012. The incident was contained in October 2012. Affected individuals were offered credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 1, 2012
Begins
Oct 10, 2012
Discovered
Dec 10, 2012
Filed
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Hawaii State AGbd_b1ae8365587dadcd2012-11-28 · +12dCandidate
- New Hampshire State AGbd_372f6803519c087c2012-11-26 · +14dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Nov 26 (NH), last Dec 10 (CA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.