HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Abel HR

bd_5c3cce2fae03f9ad · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 26, 2018

Filed

Apr 26, 2019

To disclose

22 weeks

Affected

710state residents only

Linked

3 filings

Confidence

66%

Full breach record for Abel HR →

Abel HR experienced unauthorized access to an employee email account between November 11 and November 26, 2018. The actor logged into the account and emails were automatically forwarded to an unauthorized outside account. Abel HR became aware of the suspicious activity on November 26, 2018. The incident potentially exposed personal information for 710 California residents, including names, Social Security numbers, Driver's License numbers, financial account numbers, and medical information. Abel HR changed passwords, engaged forensic specialists, and offered one year of credit monitoring through Experian.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 26, 2018 → Notified Apr 25, 2019150d ✗ CA 60-day late22 weeks discovery → filing

Incident timeline

undetected · 15 days

discovery → filing · 22 weeks / 151 days

Nov 11, 2018

Begins

Nov 26, 2018

Discovered

Apr 26, 2019

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_37f08c412cfd11a92019-04-26Verified
New Hampshire State AGbd_c3de3835a81a216b2019-04-29 · +3dVerified

Name: Abel HR
norm: abel hr
Domain: abelhr.com

Name: Abel HR
norm: abel hr
Domain: abelhr.com
Industry: Professional Servicesllm

Discovered: Nov 26, 2018
Breach occurred: Nov 11, 2018 – Nov 26, 2018
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 25, 2019
Affected individuals: 710state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Changed the password for the account to ensure that any unauthorized access to the account was ended
Launched an investigation with assistance from an outside computer forensics specialist
Changed the login credentials for the impacted email account
Providing access to credit monitoring and identity protection services for one (1) year, through Experian
Changes made: Working to implement additional safeguards and training to its employees
Reviewing our existing information security procedures and to implement additional safeguards to further secure the information on our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(151 days from discovery to filing)
Compliance flags: CA 60-day late · 150d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 26, 2018
→ Notified: Apr 25, 2019
150d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 26, 2018 → Notified: Apr 25, 2019	150d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGApr 26 · first

California State AGApr 26 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-146693
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 26, 2019
Raw hash: a1e38af911b5498b287d91e149e3af38d6b7edf712fce449acc3b72a3a0ffb98

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAbel HR

Victim entityAbel HR

Incidentdiscovered Nov 26, 2018

Stated responseChanged the password for the account to ensure that any unauthorized access to the account was ended

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov