AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Ascensus Group Holdings, Inc.

bd_464a5c279ae63ef9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 29, 2014

Filed

Aug 21, 2014

To disclose

23 days

Affected

Not disclosed

Confidence

64%

Full breach record for Ascensus Group Holdings, Inc. →6 incidents on file

Ascensus, Inc., recordkeeper for the Hanmi Bank Profit Sharing & 401(k) Savings Plan, inadvertently sent a report containing participants' names, birth dates, addresses, and Social Security numbers to an incorrect client on July 29, 2014. The recipient confirmed immediate deletion of the report. Ascensus offered 12 months of identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 29, 2014 → Notified Aug 20, 201422d ✓ CA 60-day OK23 days discovery → filing

Incident timeline

discovery → filing · 23 days

Jul 29, 2014

Begins

Jul 29, 2014

Discovered

Aug 21, 2014

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Ascensus Group Holdings, Inc.
norm: ascensus group

Name: Ascensus Group Holdings, Inc.
norm: ascensus group
Industry: Financial Servicesllm

Discovered: Jul 29, 2014
Breach occurred: Jul 29, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 20, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown

During the incident: Offering a complimentary 12-month identity protection package through TrustedID
Changes made: Evaluating additional steps that we can take to ensure that this does not happen again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: CA 60-day OK · 22d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 29, 2014
→ Notified: Aug 20, 2014
22d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 29, 2014 → Notified: Aug 20, 2014	22d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-46305
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2014
Raw hash: 8bb2227d43269271f2fa5508832c240465beb8f68f2ac01df01a0021c480f71a

Reporting entityAscensus Group Holdings, Inc.

Victim entityAscensus Group Holdings, Inc.

Incidentdiscovered Jul 29, 2014

Stated responseOffering a complimentary 12-month identity protection package through TrustedID

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov