HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Jani-King International, Inc.

bd_76a3add9fbd2ab7d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 21, 2024

Filed

Apr 16, 2025

To disclose

17 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for Jani-King International, Inc. →4 incidents on file

Jani-King International, Inc. notified consumers of a data breach where an unauthorized third party accessed and copied files containing full names and Social Security Numbers between November 26 and December 21, 2024. The incident was detected in late December 2024. Jani-King engaged forensic consultants, notified law enforcement, rebuilt affected systems, and offered 12 months of complimentary credit monitoring through Equifax.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday17 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 25 days

discovery → filing · 17 weeks / 116 days

Nov 26, 2024

Begins

Dec 21, 2024

Discovered

Mar 27, 2025

Scope determined

Apr 16, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_4905945b17c3c3d22025-04-16Verified
Montana State AGbd_ab6f1b45987c2eac2025-04-16Candidate
Nebraska State AGbd_b0c597087df90c792025-04-16Verified
California State AGbd_d229523a0df030d82025-04-16Verified

Show 2 more filings ↓up to 1d gap

New Hampshire State AGbd_d370120d43aa41e02025-04-16Verified
Massachusetts State AGbd_37b33954b068d4d02025-04-17 · +1dVerified

Name: Jani-King International, Inc.
norm: jani king

Name: Jani-King International, Inc.
norm: jani king
Industry: Professional Servicesllm

Discovered: Dec 21, 2024
Breach occurred: Nov 26, 2024 – Dec 21, 2024
Undetected for: 25 daysoccurrence → discovery
Materiality determined: Mar 27, 2025
Notification sent: Apr 16, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified federal law enforcement authorities
Initial access: valid_credentials

During the incident: Initiated a detailed review of the impacted files
Working closely with forensic consultants to investigate, contain, and remediate the incident
Confirmed the security of our network environment
Promptly notified federal law enforcement authorities of the incident
Wiped and rebuilt affected systems
Began implementing additional security measures to further enhance the privacy and security of information stored on our systems
Arranged for you to enroll in a complimentary credit monitoring service for 12 months, at no cost to you, through Equifax
Changes made: Implementing additional security measures to further enhance the privacy and security of information stored on our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 16 · first

Montana State AGApr 16 · first

Nebraska State AGApr 16 · first

California State AGApr 16 · first

New Hampshire State AGApr 16 · first

Vermont State AGApr 16 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-04-16-jani-king-international-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2025
Raw hash: c592c9fc19e3804190f52c47f9e6f4b00cf5e9f9a40cebb30646c6f00bbd088c

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityJani-King International, Inc.

Victim entityJani-King International, Inc.

Incidentdiscovered Dec 21, 2024

Stated responseInitiated a detailed review of the impacted files

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov