HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIMediumContained

Korn/Ferry International

bd_34cfe9d87b8b1172 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2012

Filed

Oct 11, 2012

To disclose

10 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Korn/Ferry International →2 incidents on file

Korn/Ferry International disclosed a sophisticated cyber attack discovered in August 2012. The incident potentially exposed names, driver's license numbers, Social Security numbers, credit card numbers, and health information for a small percentage of individuals. The company secured its network and engaged law enforcement. Disclosure was delayed at the request of federal law enforcement. One year of identity protection services was offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 71 days

Aug 1, 2012

Discovered

Oct 11, 2012

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_96c4eb0ed039263f2012-10-11Verified

Name: Korn/Ferry International
norm: korn ferry

Name: Korn/Ferry International
norm: korn ferry
Industry: Professional Servicesllm

Discovered: Aug 1, 2012
Materiality determined: —
Notification sent: Oct 11, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Asked by federal law enforcement officials to delay disclosure of the existence of the attack

During the incident: Secured its network against the attack
Working with law enforcement in connection with their investigation
Enhanced the security of the relevant computer network
Offering a one year enrollment in Experian Consumer Direct’s “Protect My ID Alert®” service
Changes made: Enhanced the security of the relevant computer network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGOct 11 · first

California State AGOct 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-36705
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 11, 2012
Raw hash: bc008f444cdb16e9f8599f43352bfaafcfda309341489bb90e8a81a9977a7b27

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKorn/Ferry International

Victim entityKorn/Ferry International

Incidentdiscovered Aug 1, 2012

Stated responseSecured its network against the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov