PhysicalProfessional ServicesProfessional ServicesTheftCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Securitas Security Services USA, Inc.

bd_3a9ea896eb2cc8a0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 26, 2007

Filed

May 30, 2007

To disclose

5 weeks

Affected

611state residents only

Confidence

66%

Full breach record for Securitas Security Services USA, Inc. →3 incidents on file

Securitas Security Services USA reported the theft of six laptops from its Western Operation Center in California on April 26, 2007. The laptops contained personal information including names, addresses, and Social Security numbers. 611 New Hampshire employees were notified on May 4, 2007. Law enforcement was notified immediately.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 34 days

Apr 26, 2007

Begins

Apr 26, 2007

Discovered

May 30, 2007

Filed

vs. sector median

12 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed611 affectedView incident

Name: Securitas Security Services USA
norm: securitas security services
Domain: securestathq.securitastechnology.com

Name: Securitas Security Services USA, Inc.
norm: securitas security services usa
Domain: apply.securitasjobs.com
Industry: Professional Servicesllm

Discovered: Apr 26, 2007
Breach occurred: Apr 26, 2007 – Apr 26, 2007
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 4, 2007
Affected individuals: 611state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Law enforcement was notified immediately when the theft was discovered
All affected persons were notified, in writing
Securitas USA set up a hotline devoted to this situation
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/securitas-security-20070530pdf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 30, 2007
Raw hash: 51fbc016658c8352bb206b6f01352b9cb3f1784527268d69db159ea7d69086db

Reporting entitySecuritas Security Services USA

Victim entitySecuritas Security Services USA, Inc.

Incidentdiscovered Apr 26, 2007

Stated responseLaw enforcement was notified immediately when the theft was discovered

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov