HackingTechnologyInformationCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIdentity (basic)Government IDMediumActive

Toshiba America Business Solutions

bd_479cd5d721943c7a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 28, 2024

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

76%

Full breach record for Toshiba America Business Solutions →2 incidents on file

Toshiba America Business Solutions, Inc. identified suspicious activity within its email environment between December 4, 2023 and March 18, 2024. An unauthorized individual potentially viewed personal information including names and Social Security numbers. The company secured its email tenant, reported to law enforcement, and offered two years of Kroll identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 4, 2023

Begins

May 28, 2024

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_0775751f4e4a5abe2024-05-28Verified
Montana State AGbd_13c0944ffc88c5672024-05-28Verified
Massachusetts State AGbd_73e3624ff983b6762024-05-28Verified
Indiana State AGbd_9682674e49d5c8b32024-05-28Verified

Show 2 more filings ↓up to 4d gap

Maine State AGbd_b9ed6031a37936b22024-05-28Verified
New Hampshire State AGbd_e836ea20b38e03782024-05-24 · +4dVerified

Name: Toshiba America Business Solutions
norm: toshiba america business

Name: Toshiba America Business Solutions
norm: toshiba america business
Industry: Technologyllm

Discovered: —
Breach occurred: Dec 4, 2023 – Mar 18, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Immediately took steps to ensure our email tenant was secure
Reported the incident to law enforcement
Changes made: Implemented additional measures to enhance the security of our email environment
Arranged for affected individuals to receive a complimentary, two-year membership of identity monitoring services through Kroll
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

New Hampshire State AGMay 24 · first

Vermont State AG+4d

Montana State AG+4d

Massachusetts State AG+4d

Indiana State AG+4d

Maine State AG+4d

California State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-586037
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2024
Raw hash: 2dfb87e7ac14c8fbb47a7e827a042428957101907175a7e837e5432f56187975

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityToshiba America Business Solutions

Victim entityToshiba America Business Solutions

IncidentUnauthorized Access

Stated responseImmediately took steps to ensure our email tenant was secure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov