HackingProfessional ServicesGovernmentProfessional ServicesCapture Stored DataData MishandlingData ExfiltratedNation State SuspectedTargetedEmployee Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDEmploymentEducationMediumContained

Acclaim Technical Services

bd_5030bb606c7ab47b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 23, 2015

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

81%

Full breach record for Acclaim Technical Services →2 incidents on file

Acclaim Technical Services, Inc. (ATS) was the target of a malicious, state-sponsored cyber intrusion beginning in late August 2015. The attack resulted in the theft of background investigation records and other personal information. Compromised data included names, Social Security numbers, addresses, dates of birth, passport and driver's license numbers, employment and residency history. ATS contained the incident, engaged cybersecurity experts, and cooperated with the FBI. Notification letters were sent December 23, 2015, with 36 months of identity protection offered via AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 26, 2015

Begins

Dec 23, 2015

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_ec0b3e499ca387372015-12-29 · +6dVerified

Name: Acclaim Technical Services
norm: acclaim technical
Domain: acclaimtechnicalservices.applytojob.com

Name: Acclaim Technical Services
norm: acclaim technical
Domain: acclaimtechnicalservices.applytojob.com
Industry: Professional ServicesllmGovernmentllm

Discovered: —
Breach occurred: Aug 26, 2015
Materiality determined: —
Notification sent: Dec 23, 2015
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDEmploymentEducation
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: ExternalEspionage
Regulator citations: Cooperating fully with the FBI in its investigation

During the incident: Took appropriate steps to contain it as soon as we discovered the incident
Retained experts in cybersecurity to assist us in our investigation of the incident
Cooperating fully with the FBI in its investigation
Arranged with AllClear ID to provide comprehensive identity protection and credit monitoring services to affected individuals and their dependent minor children for 36 months at no cost
Changes made: Working to prevent this from happening again in the future
Providing comprehensive identity theft protection and monitoring services at no cost to affected individuals and their dependent, minor children
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGDec 23 · first · this page

Massachusetts State AG+6d

Pattern: first filing Dec 23 (CA), last Dec 29 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-59396
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2015
Raw hash: 2df7453d1ed702f70821197602c813532435f05805729f708863cc29f3481978

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAcclaim Technical Services

Victim entityAcclaim Technical Services

IncidentUnauthorized Access

Stated responseTook appropriate steps to contain it as soon as we discovered the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov