HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
BAMBOO HR LLC
bd_5ad88fa8a11f6351 · schema v1 · pii pii-v1
Full breach record for BAMBOO HR LLC →Bamboo HR LLC reported a data breach involving its TraxPayroll system. An unidentified third party gained unauthorized access between February 5 and 13, 2019, attempting to divert payroll deposits. The incident involved access to employee personal information including names, SSNs, and wage data. BambooHR terminated access, engaged law enforcement, and offered 12 months of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4349f3b33a4524b6Montana State AGfiled 2019-03-04(4d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-145100
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2019
- Raw hash
- d1d470a6488b2c93917bd5a0b9ab51f6bb85dfcfc1cca5dbf72be8572de1d1a5
Reporting entity
- Name
- BAMBOO HR LLCnorm: bamboo hr
Victim entity
- Name
- BAMBOO HR LLCnorm: bamboo hr
Incident
- Discovered
- Feb 13, 2019
- Materiality determined
- Mar 13, 2019
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.