AccidentalProfessional ServicesProfessional ServicesMisconfigurationPublishing ErrorEmployee Data InvolvedGovernment IDIdentity (basic)Health (basic)MediumResolved

Snelling Staffing, LLC

bd_81d2ae4003023090 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 24, 2014

Filed

Apr 22, 2014

To disclose

13 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Snelling Staffing, LLC →

Snelling Staffing, LLC disclosed that personal information of some employees and former employees was inadvertently made available on the Internet due to errors during the installation of a cloud-based server at the home of a former employee. The incident occurred on or about January 20-21, 2014, and was discovered on January 24, 2014. Affected data may include Social Security numbers, driver's license numbers, dates of birth, home addresses, medical information, and criminal activity/drug test results. Access was disabled on the day of discovery, and a review confirmed the data was exposed. No misuse of the information is known.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 13 weeks / 88 days

Jan 20, 2014

Begins

Jan 24, 2014

Discovered

Apr 22, 2014

Filed

vs. sector median

7 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_2258ae38cc1585b52014-04-23 · +1dVerified

Name: Snelling Staffing, LLC
norm: snelling staffing

Name: Snelling Staffing, LLC
norm: snelling staffing
Industry: Professional Servicesllm

Discovered: Jan 24, 2014
Breach occurred: Jan 20, 2014 – Jan 21, 2014
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 22, 2014
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Health (basic)
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application

During the incident: Contacted the former employee and access to the information was disabled the same day
Took steps to confirm that any Snelling information in the possession of the former employee was deleted and/or destroyed
Conducted a thorough review of the information which was made available online
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(88 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGApr 22 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44897
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2014
Raw hash: b512b30dabe23b9b40db27b4a16a9f3de9005dc71fc3ea83f7d4c4ce01530601

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySnelling Staffing, LLC

Victim entitySnelling Staffing, LLC

Incidentdiscovered Jan 24, 2014

Stated responseContacted the former employee and access to the information was disabled the same day

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov