AccidentalMisconfigurationDelayed DiscoveryIDENTITY_BASICLowContained
National Experienced Workforce Solutions, Inc.
bd_6bf9fcda5183376e · schema v1 · pii pii-v1
Full breach record for National Experienced Workforce Solutions, Inc. →National Experienced Workforce Solutions, Inc. notified consumers that an internal website containing enrollee personal information was inadvertently made publicly accessible between March 14 and March 18, 2024. The incident involved a misconfiguration error, not malicious activity. Affected data included names and other personal identifiers. The company engaged forensic specialists, removed public access, coordinated with Google to de-index the site, and offered 24 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a9fed0ff90850a9dVermont State AGfiled 2024-05-21Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-21-national-experienced-workforce-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2024
- Raw hash
- 0c17251dd0f9e2e20e53e3f80c0000b50cda16bbe0ed011922c89204068ba4f4
Reporting entity
- Name
- National Experienced Workforce Solutions, Inc.norm: national experienced workforce
Victim entity
- Name
- National Experienced Workforce Solutions, Inc.norm: national experienced workforce
Incident
- Discovered
- Mar 18, 2024
- Materiality determined
- —
- Notification sent
- May 21, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Regulator citations
- notify applicable regulatory authorities where necessary
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.