HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)LowContained

TEAM Software

bd_8e13e6dc5d6476b6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 26, 2024

Filed

Nov 12, 2024

To disclose

16 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

65%

Full breach record for TEAM Software →

TEAM Software detected unusual activity on July 26, 2024, leading to the discovery that an unauthorized actor accessed certain systems between July 25 and July 26, 2024. The incident potentially exposed names and other data elements. The company engaged third-party forensics, strengthened security, and offered credit monitoring. This is a supplemental notice to the California Attorney General.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 26, 2024 → Notified Oct 24, 202490d ✗ CA 60-day late16 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 16 weeks / 109 days

Jul 25, 2024

Begins

Jul 26, 2024

Discovered

Nov 12, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_29759b90d61ff1e12024-11-12Candidate
Vermont State AGbd_57c96ec86ce7f41b2024-11-12Verified
Oregon State AGbd_6d55adc4eb06f0052024-11-12Verified
Washington State AGbd_6f15b94c23a0e4a02024-11-12Verified

Show 5 more filings ↓up to 19d gap

Illinois State AGbd_688d8046f7003f772024-11-01 · +11dVerified
Massachusetts State AGbd_5410d249da439f7e2024-10-25 · +18dVerified
California State AGbd_2d22036cb19206d12024-10-24 · +19dVerified
Montana State AGbd_3be93185868325eb2024-10-24 · +19dVerified
Indiana State AGbd_83a6a19cc4362ab22024-10-24 · +19dVerified

Name: TEAM Software
norm: team software

Name: TEAM Software
norm: team software
Industry: Technologyllm

Discovered: Jul 26, 2024
Breach occurred: Jul 25, 2024 – Jul 26, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Oct 24, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation with the assistance of third-party cybersecurity and forensics specialists
Assessed and further strengthened the security of our systems
Offering credit monitoring and identity restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(109 days from discovery to filing)
Compliance flags: CA 60-day late · 90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 26, 2024
→ Notified: Oct 24, 2024
90d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 26, 2024 → Notified: Oct 24, 2024	90d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

California State AGOct 24 · first

Montana State AGOct 24 · first

Indiana State AGOct 24 · first

Massachusetts State AG+1d

Illinois State AG+8d

Maine State AG+19d

Vermont State AG+19d

Oregon State AG+19d

Washington State AG+19d

California State AG+19d · this page

Pattern: first filing Oct 24 (CA), last Nov 12 (CA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-594758
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2024
Raw hash: 323cff4a5b749e385a03d89a6deffc5d65270440021eee8f4acaa827007284ec

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityTEAM Software

Victim entityTEAM Software

Incidentdiscovered Jul 26, 2024

Stated responseLaunched an investigation with the assistance of third-party cybersecurity and forensics specialists

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov