HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)MediumContained

Automation Personnel Services, Inc.

bd_a3a7e3423ea52208 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 17, 2020

Filed

Mar 17, 2021

To disclose

17 weeks

Affected

26,083state residents only

Linked

7 filings

Confidence

65%

Full breach record for Automation Personnel Services, Inc. →

Automation Personnel Services, Inc. (APS) disclosed a data breach discovered on November 17, 2020, involving unauthorized access to certain systems. The investigation confirmed that personal information, including names and addresses, was present in accessed files. APS reset passwords, engaged forensic specialists, notified law enforcement and regulators, and sent breach notifications to affected individuals across multiple states, including South Carolina, Rhode Island, and New York.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due17 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 17 weeks / 120 days

Nov 17, 2020

Discovered

Mar 17, 2021

Filed

vs. sector median

1 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_4e1cad55f08952742021-03-16 · +1dVerified
Indiana State AGbd_92d2b7544c14626f2021-03-16 · +1dVerified
Massachusetts State AGbd_9e97230cda349f2e2021-03-16 · +1dVerified
Montana State AGbd_dbbfdeac8df7bf092021-03-16 · +1dCandidate

Show 2 more filings ↓up to 5d gap

Maine State AGbd_ef306fd1bcf3e9a62021-03-16 · +1dVerified
New Hampshire State AGbd_f37e11a617e4a8352021-03-22 · +5dVerified

Name: Automation Personnel Services, Inc.
norm: automation personnel

Name: Automation Personnel Services, Inc.
norm: automation personnel
Industry: Professional Servicesllm

Discovered: Nov 17, 2020
Materiality determined: —
Notification sent: Feb 3, 2021
Affected individuals: 26,083state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified law enforcementNotified relevant state and federal regulators

During the incident: Moved quickly to investigate and respond to this incident
Assessed the security of relevant systems
Notified potentially affected individuals
Reset relevant account passwords
Reviewed the contents of the potentially accessed files and folders
Reviewed internal systems to identify contact information
Notified law enforcement
Notified relevant state and federal regulators
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(120 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGMar 16 · first

Indiana State AGMar 16 · first

Massachusetts State AGMar 16 · first

Montana State AGMar 16 · first

Maine State AGMar 16 · first

South Carolina State AG+1d · this page

New Hampshire State AG+6d

Pattern: first filing Mar 16 (CA), last Mar 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/AutomationPersonnelServicesInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2021
Raw hash: da4ad45c8852648eeac27f04b1bce853181e7c76a7f251538480f4fbe50f31dc

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityAutomation Personnel Services, Inc.

Victim entityAutomation Personnel Services, Inc.

Incidentdiscovered Nov 17, 2020

Stated responseMoved quickly to investigate and respond to this incident

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov