AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIALMediumContained
GENPACT INTERNATIONAL, LLC
bd_8d4d8f8389fc4087 · schema v1 · pii pii-v1
Full breach record for GENPACT INTERNATIONAL, LLC →Genpact International, Inc. disclosed a data breach involving a cloud server configuration error that left a dataset containing personal and credit information (including SSNs, names, addresses) unsecured from January 12, 2017, to April 2, 2017. The data belonged to applicants for business equipment finance loans or leases with Scottrade Bank. Genpact secured the data upon discovery and engaged forensic investigators. No evidence of misuse was found, but 24 months of credit monitoring were offered to affected individuals.
California clockDiscovered Apr 2, 2017 → Notified May 3, 201731d ✓ CA 60-day OK5 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-68655
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2017
- Raw hash
- 4a550d9a8398b5948cc48513500ebd130906fb80089cca696afa8e6c370b149c
Reporting entity
- Name
- GENPACT INTERNATIONAL, LLCnorm: genpact international
Victim entity
- Name
- GENPACT INTERNATIONAL, LLCnorm: genpact international
Incident
- Discovered
- Apr 2, 2017
- Materiality determined
- —
- Notification sent
- May 3, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL
- Attack vector
- Misconfiguration
- Threat actor
- External
- Third party
- via Scottrade Bank
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 31d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 2, 2017→ Notified: May 3, 201731d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.