HackingTechnologyProfessional ServicesInformationSupply Chain (3P Vendor)Employee Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountEmploymentMediumActive

Corday Productions, Inc.

bd_45e5e43aa1a3e283 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 24, 2014

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Corday Productions, Inc. →

Corday Productions, Inc. notified California residents that their personal information may have been compromised due to a cyber attack on Sony Pictures Entertainment, which administers payroll for Corday. The attack occurred in late November 2014. Affected data potentially includes names, addresses, SSNs, salary info, and bank account numbers. Corday offered 12 months of identity protection via AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 24, 2014

Begins

Dec 24, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Corday Productions, Inc.
norm: corday productions

Name: Corday Productions, Inc.
norm: corday productions
Industry: TechnologyllmProfessional Servicesllm

Discovered: —
Breach occurred: Nov 24, 2014 – Nov 30, 2014
Materiality determined: —
Notification sent: Dec 19, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Third party: via Sony Pictures Entertainment
Initial access: supply_chain

During the incident: Engaged in close contact with Sony regarding the security breach
Offered free identity protection services for the next twelve months through AllClear ID
Changes made: Recommended remaining vigilant and diligently reviewing financial accounts
Recommended monitoring credit reports
Recommended placing a fraud alert on credit files
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-47852
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 24, 2014
Raw hash: 110ba9706c89e3e9a8708dce1f35ae828c186e9c78c88e3be40a6670922da5e6

Reporting entityCorday Productions, Inc.

Victim entityCorday Productions, Inc.

IncidentThird-Party / Supply Chain

Stated responseEngaged in close contact with Sony regarding the security breach

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov