Social EngineeringProfessional ServicesProfessional ServicesPhishingBECEmployee Data InvolvedMulti-Stage ChainGovernment IDIdentity (basic)EmploymentFinancial accountFinancial credentialsMediumContained

AmeriPride Services Inc.

bd_99f217ed46ac54ec · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 25, 2016

Filed

Feb 26, 2016

To disclose

≤1 day

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for AmeriPride Services Inc. →

AmeriPride Services Inc. notified the NH Attorney General that on February 25, 2016, a third party used a phishing email disguised as an internal employee to fraudulently obtain W2 forms for one New Hampshire resident. The compromised data included names, addresses, social security numbers, wages, withholdings, and marital status. AmeriPride reported the incident to law enforcement (FBI), notified credit bureaus, and offered 12 months of free identity theft protection via LifeLock. The company stated the incident was not related to MyWorkLife and is providing additional employee training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · ≤1 day / 1 days

Feb 25, 2016

Begins

Feb 25, 2016

Discovered

Feb 26, 2016

Filed

vs. sector median

18 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_8b95be9aebd1d7db2016-02-26Candidate
Massachusetts State AGbd_894ccdd1d7467a812016-03-03 · +6dVerified

Name: AmeriPride Services Inc.
norm: ameripride services
Domain: ameripride.com

Name: AmeriPride Services Inc.
norm: ameripride services
Domain: ameripride.com
Industry: Professional Servicesllm

Discovered: Feb 25, 2016
Breach occurred: Feb 25, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 25, 2016
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)EmploymentFinancial accountFinancial credentials
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1566 Phishing
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Office of the Attorney GeneralContacted the FBINotified the three major U.S. credit reporting agencies
Initial access: phishing_link

During the incident: Reported the incident to appropriate law-enforcement authorities
Notified the three major U.S. credit reporting agencies
Offering free identity theft protection services to the affected resident
Contacted the FBI
Providing additional training to assist our employees in identifying future attempts
Changes made: Providing additional training to assist our employees in identifying future attempts to obtain access to confidential information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGFeb 26 · first

New Hampshire State AGFeb 26 · first · this page

Massachusetts State AG+6d

Pattern: first filing Feb 26 (MT), last Mar 3 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ameripride-20160226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2016
Raw hash: 0ec8ed5c8d44aa2aa6e92550848091a1c975962099b688748ff64663c39c86e8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAmeriPride Services Inc.

Victim entityAmeriPride Services Inc.

Incidentdiscovered Feb 25, 2016

Stated responseReported the incident to appropriate law-enforcement authorities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov