HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLow
CBIZ, INC.
bd_a81b1fd6324d50b1 · schema v1 · pii pii-v1
Full breach record for CBIZ, INC. →CBIZ, Inc. experienced an external system breach between May 29, 2023, and June 5, 2023, discovered on August 10, 2023. The breach affected 482 Maine residents, compromising names and financial account or credit/debit card numbers with associated security codes or PINs. CBIZ offered credit monitoring and identity theft protection services to those affected.
Maine clockDiscovered Aug 10, 2023 → Filed with AG Dec 29, 2023141d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6a0c7d61fabe79e4Leak Sitemeowfiled 2024-06-22(176d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_b2aef612a1f1ebc8Maine State AGfiled 2023-09-01(119d gap)Verified
- bd_bc1e70e9424da1a0California State AGfiled 2023-09-01(119d gap)Verified
- bd_f5753075017fc529Vermont State AGfiled 2023-09-01(119d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d3f884a7-f864-482f-9f18-9ead7a2c61f6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2023
- Raw hash
- 8ceee15a45067b043643b14cd744cc25c5eefac9a59dbfe54dae06acda578f0f
Reporting entity
- Name
- CBIZ, INC.norm: cbiz
- Domain
- cbiz.com
Victim entity
- Name
- CBIZ, INC.norm: cbiz
- Domain
- cbiz.com
Incident
- Discovered
- Aug 10, 2023
- Materiality determined
- —
- Notification sent
- Sep 1, 2023
- Affected individuals
- 482
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(141 days from discovery to filing)
- Compliance flags
- ME AG >90d · 141d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 10, 2023→ Filed with AG: Dec 29, 2023141d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.