HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumActive

CICS

bd_4997c38b3117d6dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 4, 2015

To disclose

—

Affected

5state residents only

Linked

2 filings

Confidence

67%

Full breach record for CICS →2 incidents on file

CICS Employment Services, Inc. notified the NH Attorney General that PII of 5 NH residents (names, addresses, DOB, SSNs) stored on a Newtek Technology Services server may have been accessed without authorization. FBI and CICS forensic exams found no evidence of compromise. CICS changed web hosts, encrypted PII, and offered 12 months of credit monitoring. Notification sent Feb 5, 2015.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 4, 2015

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_22c36f588c7bfcd52015-01-30 · +5dCandidate

Name: CICS
norm: cics
Domain: criminalscreens.com
Industry: Employment Services

Name: CICS
norm: cics
Domain: criminalscreens.com
Industry: Employment Services
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Feb 5, 2015
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Regulator citations: Notified by the FBISent Data Breach Report to the Office of the Attorney General of New Hampshire
Initial access: trusted_relationship

During the incident: CICS is fully cooperating with the FBI
Consented to the forensic examination of relevant portions of its computer network, data base and third party storage provider
Launched its own investigation
Immediately engaged the services of an independent forensics investigation firm
Changed web hosts
Confirmed that all PII contained in its network is encrypted and secure
Began notifying all potentially affected consumers on February 5, 2015
Provide them identity theft remediation and credit monitoring services through AllClear ID
Changes made: Changed web hosts
Ensured that all PII contained in its network is encrypted and secure
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJan 30 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jan 30 (CA), last Feb 4 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cics-employment-services-20150204.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 4, 2015
Raw hash: 3e9f582386604ca276310906c13cf946b44e2786faa085174cb5cb6afee19151

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCICS

Victim entityCICS

IncidentThird-Party / Supply Chain

Stated responseCICS is fully cooperating with the FBI

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov