HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataData ExfiltratedTargetedPIIIdentity (basic)LowContained

Jani-King International, Inc.

bd_ab6f1b45987c2eac · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 21, 2024

Filed

Apr 16, 2025

To disclose

17 weeks

Affected

16state residents only

Linked

7 filings

Confidence

66%

Full breach record for Jani-King International, Inc. →4 incidents on file

Jani-King International, Inc. notified Montana residents of a data breach where an unauthorized third party accessed and copied files containing personal information (names, etc.) between Nov 26 and Dec 21, 2024. Jani-King engaged forensic consultants, notified law enforcement, rebuilt systems, and offered Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 25 days

discovery → filing · 17 weeks / 116 days

Nov 26, 2024

Begins

Dec 21, 2024

Discovered

Apr 16, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_4905945b17c3c3d22025-04-16Verified
Vermont State AGbd_76a3add9fbd2ab7d2025-04-16Verified
Nebraska State AGbd_b0c597087df90c792025-04-16Verified
California State AGbd_d229523a0df030d82025-04-16Verified

Show 2 more filings ↓up to 1d gap

New Hampshire State AGbd_d370120d43aa41e02025-04-16Verified
Massachusetts State AGbd_37b33954b068d4d02025-04-17 · +1dVerified

Name: Jani-King International, Inc.
norm: jani king

Name: Jani-King International, Inc.
norm: jani king
Industry: Professional Servicesllm

Discovered: Dec 21, 2024
Breach occurred: Nov 26, 2024 – Dec 21, 2024
Undetected for: 25 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 16state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified federal law enforcement authorities
Initial access: valid_credentials

During the incident: Initiated a detailed review of the impacted files
Working closely with forensic consultants to investigate, contain, and remediate the incident
Confirmed the security of our network environment
Promptly notified federal law enforcement authorities of the incident
Wiped and rebuilt affected systems
Began implementing additional security measures to further enhance the privacy and security of information stored on our systems
Arranged for complimentary credit monitoring service through Equifax
Changes made: Wiped and rebuilt affected systems
Implementing additional security measures to further enhance the privacy and security of information stored on our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 16 · first

Vermont State AGApr 16 · first

Nebraska State AGApr 16 · first

California State AGApr 16 · first

New Hampshire State AGApr 16 · first

Montana State AGApr 16 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/04/Consumer-notification-letter-14.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2025
Raw hash: 1b2622d6432cdec2b0881c25018226b134f345d8e32c6abb0fb4c90ea204405e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityJani-King International, Inc.

Victim entityJani-King International, Inc.

Incidentdiscovered Dec 21, 2024

Stated responseInitiated a detailed review of the impacted files

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov