HackingProfessional ServicesProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Empereon Marketing

bd_44cadbd6e5336767 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 22, 2024

Filed

Sep 27, 2024

To disclose

10 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Empereon Marketing →

Empereon Marketing (via Constar Financial Services) notified California residents of a data security event involving a partner company. On July 22, 2024, Constar became aware that an unauthorized actor accessed archived data sets on a partner's systems. The breach occurred on June 30, 2024. Affected data may include names, Social Security numbers, and financial account information. The partner secured systems and engaged forensic specialists. Constar is offering credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 22 days

discovery → filing · 10 weeks / 67 days

Jun 30, 2024

Begins

Jul 22, 2024

Discovered

Sep 27, 2024

Filed

vs. sector median

9 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_05de15f04e40b3082024-09-27Verified
Indiana State AGbd_c65225b0692ecc7c2024-09-27Verified

Name: Empereon Marketing
norm: empereon marketing
Domain: empereon.com

Name: Empereon Marketing
norm: empereon marketing
Domain: empereon.com
Industry: Professional Servicesllm

Discovered: Jul 22, 2024
Breach occurred: Jun 30, 2024
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported to federal law enforcementReported to government regulators
Third party: via partner company
Initial access: trusted_relationship

During the incident: Partner promptly took steps to secure the systems
Partner launched an investigation with the assistance of cyber incident response specialists
Partner reported the event to federal law enforcement
Constar Financial Services conducted a comprehensive review of the information within the impacted files
Constar Financial Services reported this event to federal law enforcement and government regulators
Offering credit monitoring and identity restoration services at no cost through Equifax
Changes made: Working to review and further enhance protections as part of ongoing commitment to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 27 · first

Indiana State AGSep 27 · first

California State AGSep 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-592570
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2024
Raw hash: 888fa1b1b1dd8e7c029e3e57a39d129d5f217da535fc72ce88e392b442ad17b5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEmpereon Marketing

Victim entityEmpereon Marketing

Incidentdiscovered Jul 22, 2024

Stated responsePartner promptly took steps to secure the systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov