AccidentalProfessional ServicesProfessional ServicesMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Retail Services WIS Corporation

bd_47450b97e951d5dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 23, 2026

Filed

Jun 15, 2026

To disclose

12 weeks

Affected

4state residents only

Confidence

66%

Full breach record for Retail Services WIS Corporation →2 incidents on file

On March 23, 2026, an employee of Retail Services WIS Corporation inadvertently emailed a spreadsheet containing names, Social Security numbers, and addresses to District Managers. The company immediately deleted the email and attachments from servers and recipient accounts and confirmed deletion with recipients. One Rhode Island resident was affected. The company is offering two years of identity protection via Experian.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d12 weeks discovery → filing

Incident timeline

discovery → filing · 12 weeks / 84 days

Mar 23, 2026

Begins

Mar 23, 2026

Discovered

Jun 15, 2026

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Retail Services WIS Corporation
norm: retail services wis
Domain: wisintl.com

Name: Retail Services WIS Corporation
norm: retail services wis
Domain: wisintl.com
Industry: Professional Servicesllm

Discovered: Mar 23, 2026
Breach occurred: Mar 23, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unknown
Threat actor: Internal

During the incident: Immediately took steps to delete the email and the Attachment from the Company’s servers
Deleted the email and the Attachment from the corporate email accounts of the employees who received the email
Contacted each of the employees who received the Attachment to confirm their deletion
Changes made: Offering two years of identity protection services, at no cost, through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(84 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-977-retail-services-wis-corporation/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 15, 2026
Raw hash: 8081dbb9fa2075181ae87c22c03d58ada848294d75b303bb9a3c6f8eda4fd27f

Reporting entityRetail Services WIS Corporation

Victim entityRetail Services WIS Corporation

Incidentdiscovered Mar 23, 2026

Stated responseImmediately took steps to delete the email and the Attachment from the Company’s servers

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov