Social EngineeringHealthcareProfessional ServicesHealthcarePhishingStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

STERICYCLE, INC.

bd_9838e91af18ddca8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 31, 2020

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for STERICYCLE, INC. →2 incidents on file

Stericycle, Inc. notified California residents of a data security incident involving email phishing attempts targeting employees. Unauthorized access to employee email accounts occurred between October 2019 and April 2020. While personal information (including SSNs, financial account numbers, and health info) was present in affected accounts, there is no evidence it was accessed. Stericycle secured accounts, updated security controls, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 1, 2019

Begins

Aug 31, 2020

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_0fac471d72510ed22020-08-31Verified
Oregon State AGbd_f8d84c251d9b4cd32020-08-31Verified
Washington State AGbd_272a67efcc47c0cb2020-08-26 · +5dCandidate
Indiana State AGbd_36e73081c3bf149d2020-08-26 · +5dVerified

Show 1 more filing ↓up to 5d gap

Montana State AGbd_c553d7b276f276792020-08-26 · +5dVerified by operator

Name: STERICYCLE, INC.
norm: stericycle

Name: STERICYCLE, INC.
norm: stericycle
Industry: HealthcarellmProfessional Servicesllm

Discovered: —
Breach occurred: Oct 1, 2019 – Apr 8, 2020
Materiality determined: —
Notification sent: Aug 26, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Launched an investigation into the suspected phishing activity
Secured each impacted employee email account
Continued to monitor for suspicious activity
Reviewed and updated employee email security controls
Continued to train workforce regarding cybersecurity issues
Providing access to 24 months of MyIDCare credit monitoring and identity protection services
Changes made: Reviewed and updated employee email security controls
Continued to train workforce regarding cybersecurity issues
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGAug 26 · first

Indiana State AGAug 26 · first

Montana State AGAug 26 · first

New Hampshire State AG+5d

Oregon State AG+5d

California State AG+5d · this page

Pattern: first filing Aug 26 (WA), last Aug 31 (CA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-193609
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2020
Raw hash: 2bc5bad6a69e10e3602e7afc5caff58b25d16e5fb7411ba8010c5e3da1a5bead

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySTERICYCLE, INC.

Victim entitySTERICYCLE, INC.

IncidentPhishing

Stated responseLaunched an investigation into the suspected phishing activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov