PhysicalProfessional ServicesProfessional ServicesTheftDelayed DiscoveryIdentity (basic)Government IDHighContained

ABM INDUSTRIES INCORPORATED

bd_8064376342cc558b · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 18, 2011

Filed

Apr 19, 2011

To disclose

5 weeks

Affected

1,523state residents only

Linked

2 filings

Confidence

66%

Full breach record for ABM INDUSTRIES INCORPORATED →6 incidents on file

ABM Industries, Inc. notified Hawaii OCP of a physical theft at its Atlanta facility on March 5, 2011. Thieves stole electronics including a computer containing tax reporting info (names, SSNs) for 1,523 Hawaii residents. Notification was delayed at police request until mid-April 2011. ABM engaged Kroll for 1-year credit monitoring.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due5 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 13 days

discovery → filing · 5 weeks / 32 days

Mar 5, 2011

Begins

Mar 18, 2011

Discovered

Apr 19, 2011

Filed

vs. sector median

15 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3723101a136858eb2011-04-26 · +7dVerified

Name: ABM INDUSTRIES INCORPORATED
norm: abm industries

Name: ABM INDUSTRIES INCORPORATED
norm: abm industries
Industry: Professional Servicesllm

Discovered: Mar 18, 2011
Breach occurred: Mar 5, 2011
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 18, 2011
Affected individuals: 1,523state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified State of Hawaii Office of Consumer ProtectionCobb County Police Department requested delay of notification to impede investigation

During the incident: Reported the theft to the Cobb County Police Department
Worked aggressively with the Department and private investigators to recover the stolen equipment
Publicly offered a reward for its return
Arranged through Kroll, Inc. for all affected individuals to receive one year of identity protection services, including continuous credit monitoring, at no cost to them
Changes made: Carefully reviewing security procedures at its Atlanta facility and will enhance them in an effort to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: HI CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Hawaii State AGApr 19 · first · this page

Massachusetts State AG+7d

Pattern: first filing Apr 19 (HI), last Apr 26 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2015/12/OCP-2011-0599.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2011
Raw hash: e93ecbfe00b2b02ebf9e642e19a8a5d3fbdc84b757e5775c12663f9170446a43

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityABM INDUSTRIES INCORPORATED

Victim entityABM INDUSTRIES INCORPORATED

Incidentdiscovered Mar 18, 2011

Stated responseReported the theft to the Cobb County Police Department

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org