UnknownMedium

Collabera

bd_534cb167d91a2bab · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 10, 2020

Filed

Jul 21, 2020

To disclose

6 weeks

Affected

72,594

Linked

9 filings

Confidence

95%

Full breach record for Collabera →

Collabera, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2020-07-21. The breach occurred during 5/24/2020 - 6/8/2020. The breach was discovered on 6/10/2020. 72,594 individuals were affected. Notice was sent on 7/10/2020.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 17 days

discovery → filing · 6 weeks / 41 days

May 24, 2020

Begins

Jun 10, 2020

Discovered

Jul 21, 2020

Filed

This filing is one of 9 about the same incident.View merged incident

A leak claim by maze about this victim predates this filing by 43 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemazebd_5d5bd239a535e0f92020-06-08 · +43dVerified by operator

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_a1782f53e1d2060f2020-07-21Verified
California State AGbd_b7536fb665576b4c2020-07-21Verified
New Hampshire State AGbd_83c901139b1156f82020-07-17 · +4dVerified by operator
Indiana State AGbd_041bbb0ab945452d2020-07-10 · +11dVerified by operator

Show 3 more filings ↓up to 12d gap

Delaware State AGbd_8d1bb831591496b22020-07-10 · +11dVerified by operator
Washington State AGbd_889cc32e696bff5c2020-07-09 · +12dVerified
Montana State AGbd_e6483d8e749b4d982020-07-09 · +12dVerified

Name: Collabera
norm: collabera
Domain: collabera.com

Name: Collabera
norm: collabera
Domain: collabera.com

Discovered: Jun 10, 2020
Breach occurred: May 24, 2020 – Jun 8, 2020
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2020
Affected individuals: 72,594nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: Leak >30dOR AG ≤45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Washington State AGJul 9 · first

Montana State AGJul 9 · first

Indiana State AG+1d

Delaware State AG+1d

New Hampshire State AG+8d

Massachusetts State AG+12d

California State AG+12d

Oregon State AG+12d · this page

Pattern: first filing Jul 9 (WA), last Jul 21 (OR) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2020
Raw hash: 4d6ec3cc2920d79930c1470b0afd46ba34cb0563ef8ae3d5efc6333526054db9

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityCollabera

Victim entityCollabera

Incidentdiscovered Jun 10, 2020

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov