HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Sterling BackCheck
bd_339bfb31c634d293 · schema v1 · pii pii-v1
Full breach record for Sterling BackCheck →Certified Employment Screening dba Americhek notified consumers that its vendor, BackChecked LLC, experienced unauthorized access to its digital systems on September 26, 2024. The incident potentially exposed applicants' names, dates of birth, driver's license numbers, and Social Security numbers. Americhek is offering 12 months of complimentary identity protection services. 7,664 individuals were notified.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_35058142b0ccc599California State AGfiled 2024-12-13Candidate
- bd_c9273a019b67f0daNew Hampshire State AGfiled 2024-12-13Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-13-certified-employment-screening-dba-americhek-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2024
- Raw hash
- b43c5b35ef6a0a63c00adf514c3ce15c513bbbcef3ca3f62355e039a80f7a4d6
Reporting entity
- Name
- Certified Employment Screening Inc.norm: certified employment screening
Victim entity
- Name
- Sterling BackChecknorm: sterling backcheck
Incident
- Discovered
- Sep 26, 2024
- Materiality determined
- —
- Notification sent
- Dec 13, 2024
- Affected individuals
- 7,664
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Third party
- via BackChecked LLC
Compliance
- Time to disclose
- 11 weeks(78 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.