MisuseTechnologyProfessional ServicesInformationPrivilege AbuseData ExfiltratedRansom DemandedTargetedIdentity (basic)Government IDMediumResolved

PfP Industries

bd_99be58278d0dfac3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 18, 2024

Filed

Jun 4, 2024

To disclose

11 weeks

Affected

1state residents only

Confidence

66%

Paycor, Inc. notified PfP Industries employees of a security incident involving unauthorized access by a third-party service provider employee on March 18, 2024. The incident resulted in one fraudulent payment and potential exposure of names, addresses, and SSNs. Paycor terminated the employee, notified law enforcement, reimbursed fraudulent payments, and offered 24 months of credit monitoring. The investigation is complete.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 78 days

Mar 18, 2024

Discovered

Jun 4, 2024

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Paycor
norm: paycor
Domain: paycor.com

Name: PfP Industries
norm: pfp industries
Domain: paycor.com
Industry: TechnologyllmProfessional Servicesllm

Discovered: Mar 18, 2024
Materiality determined: —
Notification sent: May 31, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: PartnerFinancial
Regulator citations: Notified law enforcement
Initial access: insider_action

During the incident: Terminated the account of the Service Provider employee engaged in the fraudulent activity
Notified the Service Provider
Coordinated their investigation into the fraudulent activity
Notifying law enforcement
Taking all available steps under contract and law
Working with PFP to understand the impact on PFP’s accounts
Taking all necessary steps to remediate any underlying issues contributing to the unauthorized access
Ensuring any fraudulent payments were reimbursed accordingly
Bolster its existing administrative and technical safeguards
Improving its policies and procedures
Implementing additional training
Seeking all remedies available under law
Pursuing criminal prosecution through the assistance of law enforcement
Providing twenty-four (24) months of credit monitoring services and identity protection services from Experian
Changes made: Bolstered existing administrative and technical safeguards
Improved policies and procedures
Implemented additional training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(78 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1447.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2024
Raw hash: 1e02521283bb0c02ee6b448586c53a0f5ee41497be997b30b3afe08e4c1eaac0

Reporting entityPaycor

Victim entityPfP Industries

Incidentdiscovered Mar 18, 2024

Stated responseTerminated the account of the Service Provider employee engaged in the fraudulent activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov