HackingFinancial ServicesFinanceStolen CredentialsEmployee Data InvolvedIdentity (basic)PIILowContained

Everest Global Services, Inc

bd_3a994f2662ff9efe · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 15, 2022

Filed

Feb 17, 2023

To disclose

27 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

65%

Full breach record for Everest Global Services, Inc →

Everest Global Services, Inc. experienced unauthorized access to five email accounts between August 8 and August 16, 2022. The company identified suspicious activity on August 15, 2022. Affected data includes names and potentially other personal information of employees of client entities. The company secured the environment, reset passwords, reinforced MFA, and offered identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 15, 2022 → Notified Feb 6, 2023175d ✗ CA 60-day late27 weeks discovery → filing

Incident timeline

undetected · 7 days

discovery → filing · 27 weeks / 186 days

Aug 8, 2022

Begins

Aug 15, 2022

Discovered

Feb 17, 2023

Filed

vs. sector median

+18 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_afbb6c19fe8ee8b92022-12-23 · +56dVerified
New Hampshire State AGbd_c66e06e07833730f2022-12-19 · +60dVerified
Indiana State AGbd_9a110b87bf0e0bda2022-12-16 · +63dVerified
Montana State AGbd_b4d427d811c2e3ec2022-12-16 · +63dCandidate

Show 3 more filings ↓up to 161d gap

Oregon State AGbd_cb49d4b24eef8f8e2022-12-16 · +63dVerified
California State AGbd_1e1cd906474ea4ca2023-07-27 · +160dVerified
New Hampshire State AGbd_cff0a20abebecd512023-07-28 · +161dVerified

Name: Everest Global Services, Inc
norm: everest global

Name: Everest Global Services, Inc
norm: everest global
Industry: Financial Servicesllm

Discovered: Aug 15, 2022
Breach occurred: Aug 8, 2022 – Aug 16, 2022
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Implemented incident response protocols
Secured the email environment
Engaged independent computer forensic experts
Resetting passwords for email accounts
Reinforcing multi-factor authentication measures
Increasing the frequency of mandatory company-wide training and awareness of increasing cyber risks
Offering identity theft protection services through IDX
Changes made: Reinforcing multi-factor authentication measures
Increasing the frequency of mandatory company-wide training and awareness of increasing cyber risks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(186 days from discovery to filing)
Compliance flags: CA 60-day late · 175d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 15, 2022
→ Notified: Feb 6, 2023
175d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 15, 2022 → Notified: Feb 6, 2023	175d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Indiana State AGDec 16 · first

Montana State AGDec 16 · first

Oregon State AGDec 16 · first

New Hampshire State AG+3d

Massachusetts State AG+7d

California State AG+63d · this page

California State AG+223d

New Hampshire State AG+224d

Pattern: first filing Dec 16 (IN), last Jul 28 (NH) — a 224-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-563376
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2023
Raw hash: 33931d7893d708fa14b9d2b41e0350344c4d12513f21b6ba97b95dc59c344c7d

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityEverest Global Services, Inc

Victim entityEverest Global Services, Inc

Incidentdiscovered Aug 15, 2022

Stated responseImplemented incident response protocols

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov