Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained

Terminix Global Holdings

bd_63678ffc75ec207d · schema v1 · pii pii-v1

Full breach record for Terminix Global Holdings →

Terminix Global Holdings reported a data breach affecting 14,708 current and former employees. Hackers gained access to an Office 365 account via a phishing scam on September 10, 2020, causing emails to be auto-forwarded until September 22. Compromised data included names, SSNs, dates of birth, employment dates, and 401K balances. The company contained the breach, engaged law enforcement, and provided two years of identity theft protection services.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_3aab291eabee7922Maine State AGfiled 2020-10-11(2d gap)Candidate

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-194953
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2020
Raw hash: 3156e3f018cdc6dbeefd9cfe5b8face5980d101023ee0ade955a6a993b4e4343

Reporting entity

Name: Terminix Global Holdings
norm: terminix global

Victim entity

Name: Terminix Global Holdings
norm: terminix global

Incident

Discovered: Sep 16, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 14,708
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notifying state authorities
Initial access: phishing_link

Compliance

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.