Social EngineeringOtherPhishingCustomer Data InvolvedPIIGovernment IDFinancialMediumResolved

AmeriPride Services Inc.

bd_8b95be9aebd1d7db · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 25, 2016

Filed

Feb 26, 2016

To disclose

≤1 day

Affected

1state residents only

Linked

3 filings

Confidence

64%

Full breach record for AmeriPride Services Inc. →

AmeriPride Services Inc. notified employees of a data security incident on Feb 25, 2016, where W2 information (SSN, wages, etc.) was compromised via a phishing attack. Affected individuals were offered 12 months of LifeLock identity theft protection. The FBI was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · ≤1 day / 1 days

Feb 25, 2016

Begins

Feb 25, 2016

Discovered

Feb 26, 2016

Filed

vs. sector median

8 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_99f217ed46ac54ec2016-02-26Verified
Massachusetts State AGbd_894ccdd1d7467a812016-03-03 · +6dVerified

Name: AmeriPride Services Inc.
norm: ameripride services
Domain: ameripride.com

Name: AmeriPride Services Inc.
norm: ameripride services
Domain: ameripride.com
Industry: Otherllm

Discovered: Feb 25, 2016
Breach occurred: Feb 25, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 26, 2016
Affected individuals: 1state-resident count only
Data types: PIIGovernment IDFinancial
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified the FBIReporting the incident to the appropriate state agencies and federal authorities
Initial access: phishing_link

During the incident: Providing each impacted employee with free identity theft protection services through LifeLock
Contacted the FBI
Reporting the incident to the appropriate state agencies and federal authorities
Notified the three major credit reporting agencies
Changes made: Providing additional training to assist our employees in identifying future attempts to obtain access to confidential information
Taken immediate action to prevent future incidents of this nature
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGFeb 26 · first

Montana State AGFeb 26 · first · this page

Massachusetts State AG+6d

Pattern: first filing Feb 26 (NH), last Mar 3 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/AmeriPride.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2016
Raw hash: bfd8255a8358d50b05bcfbcc42b003a06ff769c9bb7f9d2ed8afe7cdab5a4335

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAmeriPride Services Inc.

Victim entityAmeriPride Services Inc.

Incidentdiscovered Feb 25, 2016

Stated responseProviding each impacted employee with free identity theft protection services through LifeLock

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov