HackingTechnologyProfessional ServicesInformationStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDBiometricHighContained

Form I-9 Compliance

bd_511b3bdd2f8e61d9 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 12, 2024

Filed

Oct 16, 2024

To disclose

27 weeks

Affected

2,852state residents only

Linked

8 filings

Confidence

66%

Full breach record for Form I-9 Compliance →4 incidents on file

Form I-9 Compliance notified the Washington AG of a cybersecurity incident occurring on Feb 5, 2024, discovered April 12, 2024. Unauthorized access affected PII including SSNs, driver's licenses, and biometrics. Notifications began May 31, 2024. 2,852 WA residents notified. Remediation included credential resets and credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d27 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 67 days

discovery → filing · 27 weeks / 187 days

Feb 5, 2024

Begins

Apr 12, 2024

Discovered

Oct 16, 2024

Filed

vs. sector median

+8 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Oregon State AGbd_1338e71db161428e2024-10-16Verified
South Carolina State AGbd_10613a0a365ff0472024-10-17 · +1dVerified
New Hampshire State AGbd_a28159e439c286e82024-10-15 · +1dVerified
Vermont State AGbd_047033e7a754f0822024-10-12 · +4dVerified

Show 3 more filings ↓up to 22d gap

Maine State AGbd_28932f4137a33d4f2024-10-11 · +5dCandidate
California State AGbd_b80f1ea48e5293082024-10-11 · +5dVerified
Maine State AGbd_600a2c44a7e82cf62024-11-07 · +22dVerified

Name: Form I-9 Compliance
norm: form i 9 compliance

Name: Form I-9 Compliance
norm: form i 9 compliance
Industry: TechnologyllmProfessional Servicesllm

Discovered: Apr 12, 2024
Breach occurred: Feb 5, 2024
Undetected for: 67 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 31, 2024
Affected individuals: 2,852state-resident count only
Data types: Identity (basic)Government IDBiometric
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Washington State Office of the Attorney General
Initial access: valid_credentials

During the incident: Took a portion of our network offline
Activated our response process
Launched an investigation of the incident with the support of external cybersecurity experts
Reported the incident to law enforcement
Worked with external cybersecurity experts to confirm the unauthorized third party no longer has access to our company systems
Reset all account credentials associated with the affected portion of our network
Implemented additional security measures with the guidance of external experts
Established a dedicated call center to answer customer questions
Providing affected individuals with 24 months of complimentary credit monitoring and identity theft protection services through Experian
Changes made: Implemented additional security measures with the guidance of external experts to strengthen the ongoing security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(187 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Maine State AGOct 11 · first

California State AGOct 11 · first

Vermont State AG+1d

New Hampshire State AG+4d

Oregon State AG+5d

Washington State AG+5d · this page

South Carolina State AG+6d

Maine State AG+27d

Pattern: first filing Oct 11 (ME), last Nov 7 (ME) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA31007.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2024
Raw hash: b7019e5e0a690aa7735aac03879864b98ebf4b9d0a35dc7bf97583964b9db14e

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityForm I-9 Compliance

Victim entityForm I-9 Compliance

Incidentdiscovered Apr 12, 2024

Stated responseTook a portion of our network offline

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com