General Services Corporation
bd_39908198543f4af2 · schema v1 · pii pii-v1
Full breach record for General Services Corporation →ICAFS, Inc. dba General Services Corporation (GSC) experienced a sophisticated cyber attack on April 10, 2023, resulting in unauthorized access to certain data on its network. The incident potentially impacted approximately 6 New Hampshire residents. The potentially impacted information included personal data, specifically identified in the notice template as including forms of identification. GSC engaged third-party specialists, notified law enforcement, rotated credentials, and disabled systems. Complimentary credit monitoring was offered to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 10, 2023
Begins
Apr 10, 2023
Discovered
Sep 28, 2023
Filed
vs. sector median
+6 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Maine State AGbd_904ca574e49958ce2023-09-28Verified
- Massachusetts State AGbd_c7972186cf09a7052023-09-28Verified
- Vermont State AGbd_f2e42433c6d542e62023-08-17 · +42dVerified
- Indiana State AGbd_9f856f1ba7f4a2f42023-07-06 · +84dCandidate
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jul 6 (IN), last Sep 28 (NH) — a 84-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.