DisclosureLens
HackingProfessional ServicesProfessional ServicesVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)Government IDMediumContained

America Works of New York Inc.

bd_a37911da86ec03f3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 30, 2023

Filed

Dec 27, 2023

To disclose

27 days

Affected

Not disclosed

Confidence

67%
Full breach record for America Works of New York Inc. →

America Works of New York Inc. notified employees of a data breach involving their payroll provider, Paycor. Paycor's MOVEit transfer software was exploited in May 2023, leading to the unauthorized access of employee data including names, dates of birth, and Social Security numbers. America Works engaged Kroll to provide 12 months of free identity monitoring services to affected individuals.

Vermont clock⏱ VT AG >14 bday27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 213 days
discovery → filing · 27 days

May 1, 2023

Begins

Nov 30, 2023

Discovered

Dec 27, 2023

Filed

vs. sector median

14 wks faster

Part of Paycor supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.