HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Talus Pay
bd_755ff4a99a00cc09 · schema v1 · pii pii-v1
Full breach record for Talus Pay →Talus Pay (AMCP Payments Intermediate Company LLC) disclosed that an unauthorized actor accessed employee email accounts between March 28 and May 16, 2023. The incident was discovered on May 16, 2023. Personal information, potentially including names, addresses, SSNs, and financial account details, was accessed. The company secured the email tenant, launched an investigation, and is offering 12 months of credit monitoring to affected individuals.
California clockDiscovered May 16, 2023 → Notified Dec 14, 2023212d ✗ CA 60-day late30 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1910d29f36b809e3Maine State AGfiled 2023-12-14Candidate
- bd_986f88fa61f52988Oregon State AGfiled 2023-12-14Verified by operator
- bd_faf67977a4138675New Hampshire State AGfiled 2023-12-14Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-577925
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 14, 2023
- Raw hash
- ae3748e3a9beb58a96751a5f49f1eb9f182e4747403396c7e522d1361bae2265
Reporting entity
- Name
- Talus Paynorm: talus pay
Victim entity
- Name
- Talus Paynorm: talus pay
Incident
- Discovered
- May 16, 2023
- Materiality determined
- —
- Notification sent
- Dec 14, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 30 weeks(212 days from discovery to filing)
- Compliance flags
- CA 60-day late · 212d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 16, 2023→ Notified: Dec 14, 2023212d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.