CBIZ, INC.
bd_79465978a9228cee · schema v1 · pii pii-v1
Full breach record for CBIZ, INC. →4 incidents on fileCBIZ, Inc. notified individuals of a data incident involving MOVEit Transfer software. An unauthorized party exploited a vulnerability in MOVEit to access a server and download data between May 29 and June 5, 2023. Affected data included names, dates of birth, and Social Security numbers. CBIZ patched the vulnerability and offered two years of identity monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
May 31, 2023
Discovered
Sep 1, 2023
Filed
vs. sector median
6 wks faster
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Massachusetts State AGbd_59823e08633c31c12023-09-01Verified by operator
- New Hampshire State AGbd_ab8685161ea5f6d12023-09-01Verified by operator
- Maine State AGbd_b2aef612a1f1ebc82023-09-01Verified by operator
- Indiana State AGbd_babe041abe73d82b2023-09-01Verified by operator
Show 6 more filings ↓Show fewer ↑up to 119d gap
- California State AGbd_bc1e70e9424da1a02023-09-01Verified by operator
- Vermont State AGbd_f5753075017fc5292023-09-01Verified by operator
- South Carolina State AGbd_1c8025d02f0809fc2023-09-05 · +4dVerified by operator
- HHS OCRbd_b21836f9b07f5b0e2023-11-10 · +70dVerified by operator
- New Hampshire State AGbd_58c107ea2a926a352023-12-29 · +119dVerified
- Maine State AGbd_a81b1fd6324d50b12023-12-29 · +119dVerified by operator
Filing propagation · 11 filings · 9 states
View merged incident ↗Pattern: first filing Sep 1 (MA), last Dec 29 (ME) — a 119-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.